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Foreword 



rd , 



This Technical Specification has been produced by the 3 Generation Partnership Project (3GPP). 

The contents of the present document are subject to continuing work within the TSG and may change following formal 
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an 
identifying change of release date and an increase in version number as follows: 

Version x.y.z 

where: 

X the first digit: 

1 presented to TSG for information; 

2 presented to TSG for approval; 

3 or greater indicates TSG approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, 
updates, etc. 

z the third digit is incremented when editorial only changes have been incorporated in the document. 
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Scope 



The present document provides the Conformance Test Specification for the Subscriber Identity Module defined in 
GSM 11.11 [1], GSM 11.12 [8] and GSM 11.18 [9]. 



References 



The following documents contain provisions which, through reference in this text, constitute provisions of the present 
document. 

• References are either specific (identified by date of publication, edition number, version number, etc.) or 
non-specific. 

• For a specific reference, subsequent revisions do not apply. 

• For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including 
a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same 
Release as the present document. 

2.1 Normative references 

[1] GSM 11.11: "Digital cellular telecommunications system (Phase 2+); Specification of the 

Subscriber Identity Module - Mobile Equipment (SIM - ME) interface". 

[2] Void. 

[3] Void 

[4] Void 

[5] ISO/IEC 7816-3 (1997): "Information technology - Identification cards - Integrated circuit(s) cards 

with contacts. Part 3: Electronic signals and transmission protocols". 

[6] Void 

[7] Void 

[8] GSM 11.12: "Digital cellular telecommunications system (Phase 2); Specification of the 3 Volt 

Subscriber Identity Module - Mobile Equipment (SIM - ME) interface". 

[9] GSM 11.18: "Digital cellular telecommunications system (Phase 2+); Specification of the 1.8 Volt 

Subscriber Identity Module - Mobile Equipment (SIM - ME) interface". 

[10] ETSI ETS 300 641: "Digital cellular telecommunications system (Phase 2); Specification of the 3 

Volt Subscriber Identity Module - Mobile Equipment (SIM - ME) interface (GSM 11.12)". 

2.2 Informative references 

All test cases included in GSM 1 1.17 are based on phase 2, except 1.8 V electrical tests which are a phase 2+ feature. 
Enhancements will be done time by time. 
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3 Definitions and abbreviations 

3.1 Definitions 

For the purposes of the present document, the terms and definitions given GSM 11.11 [1] and the following apply: 

Implementation Conformance Statement (ICS): statement made by the supplier of an implementation or system 

claimed to conform to a given specification, stating which capabilities have been implemented 

The ICS can take several forms: protocol ICS, profile ICS, profile specific ICS, information object ICS, etc. 

ICS proforma: document, in the form of a questionnaire, which when completed for an implementation or system 
becomes an ICS 

3.2 Abbreviations 

For the purposes of the present document, the following abbreviations apply: 

CRn Conformance Requirement 'n' 

FT Fixed Termination 

ICS Implementation Conformance Statement 

lUT Implementation Under Test 

ME Mobile Equipment 

MS Mobile Station 

SIM Subscriber Identity Module 

TS Test Specification 



4 Test environment 

This clause specifies several requirements which shall be met, and a number of rules which shall be adhered to before 
testing can proceed. 

4.1 Test equipment 

This subclause recommends a minimum specification for each of the items of test equipment referenced in the tests. 

4.1.1 ME simulator 

This item of equipment shall allow T=0 protocol communications to take place on both ID-1 and plug-in SIM cards. It 
shall be able to generate and send any command APDU and receive any of the possible responses. These commands 
may be generated manually, one at a time, or automatically from a predefined batch procedure containing one or more 
commands. 

The ME simulator shall be able to support clock stop modes. 

The ME simulator shall be able to accept an external clock signal to drive CLK (contact C3) of the SIM. 

It shall be possible to access all the SIM contacts either directly or through test points. 

4.1 .2 Signal generation device 

4.1.2.1 VCC 

The voltage level for VCC (contact CI) of the SIM shall be adjustable between -0,5 V and 6.0 V to an accuracy of 1% 
of the nominal VCC voltage (e.g. 50 mV for a 5 V card). 
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The ME simulator shall be able to source current on the VCC contact in the range -2 mA to 12 mA statically and to 
deliver charges of > 400 nAs without lowering the VCC-voltage for more than 10 % of VCC nom. 

4.1.2.2 RST 

The generated voltage level for RST (contact C2) of the SIM shall be adjustable between -0,5 V and 6.0 V to an 

accuracy of 50 mV. 

The rise and fall times shall be adjustable from us to 500 us with an accuracy of 5 us. (to check if the SIM works with 
the defined rise and fall times.) 

The beginning of the rising edge is programmable from 1 elk-cycle to 50000 elk-cycles after enabling the elk-line. 

4.1.2.3 CLK 

This item of equipment shall be able to generate square wave signals for the clock on the SIM, any of which can be a 
single-shot or continuous signal, in the range 1 MHz to 5 MHz. The voltage levels for both high and low states shall be 
adjustable between -0,5 V and 6,0 V to an accuracy of 0.1 V. The duty cycle of the clock signal shall be adjustable 
between 40 % and 60 % to an accuracy of 1%. It shall also provide control over the following parameters. 

The voltage levels for both high and low states shall be adjustable between V and 6 V to an accuracy of 1 % of the 
nominal VCC voltage. The duty cycle of the clock signal shall be adjustable between 40 % and 60 % to an accuracy of 
1 % or 5 ns whichever is the worst. 

It shall also provide control over the following parameters: 

rise and fall time to an accuracy of 1 % or 5 ns whichever is the worst (5 ns = 2.5 % accuracy for f„jax = 5 MHz). 

4.1.2.4 10 

The equipment shall be able to generate lO-Signals according to GSM 11.11 [1]. 

The voltage levels for high and low states shall be adjustable between -0.5 V and 6 V to an accuracy of 1 % of the 
nominal VCC voltage. The lO line in transmission mode (high bit) shall be programmable between state A (active 
driven output) and state Z (lO-voltage-driver inactive, current source I-IO-high active). 

It shall also provide control over the rise and fall time of 100 ns to 1000 ns with an accuracy of 50 ns. 

The ME simulator shall be able to source and sink currents on the lO contact in the range -20 uA to H-20 uA in state high 
and mA -1 mA in state low (receiving mode) and shall be able to switch in transmission mode (outputting a high Bit) 
between voltage and current driving mode. 

The timing of the bitstream (jitter, guardtime, etu-value, etc.) on the lO-Line shall be programmable with an accuracy of 
< 0,01 etu or 2 elk-cycles whichever is the worst. 

4.1 .3 Precision force-inducing contacting device 

This item of equipment shall be able to apply a prescribed and maintained level of force onto one or more contacts of a 
SIM. The range shall be between N and 0.5 N and accurate to 0.01 N. 

4.1 .4 Temperature controllable environment 

This item of equipment shall be able to control the temperature of a chamber large enough to enclose a SIM and card 
reader. The range of temperature control shall be between -25°C and H-85°C to an accuracy of 0.5°C. 

4.1 .5 Temperature measuring device 

This item of equipment shall be able to measure the temperature of the SIM to within 0.5°C. The range of this device 
shall allow measurement of temperatures between -25°C and h-85°C. 
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4.1 .6 Voltage measuring device 



This item of equipment shall be able to measure static and transient voltages on any one of the contacts of the SIM. The 
measurable voltage range shall be between -2 V and +7 V to an accuracy of 1 % of the nom. VCC voltage (e.g. 30 mV 
for 3 V cards) with a timebase accuracy of 25 ns. 

4.1 .7 Precision measuring device 

This item of equipment shall be able to measure both linear and radius of curvature dimensions to an accuracy of 
0.01 mm. 

4.1 .8 Current measuring device 

This item of equipment shall be able to supervise the current levels for any one of the contacts of the SIM. 
The Simulator shall be able to detect an over- or underload with a time resolution of < 100 ns. 



Channel 


Minimum 


lUlaximum 


Resolution 


VCC high 


-2 mA 


+12.5 mA 


125uA 


VCC high 


-2 mA 


+12.5 mA 


125uA 










VCC Burst 


12 mA 


+250 mA 


2.5 mA 


RST/CLK high state 


-50 uA 


+50 uA 


1 uA 


RST/CLK low state 


-250 uA 


+250 uA 


2.5 uA 


10 high state 


-50 uA 


+50 uA 


1 uA 


10 low state 


-1 500 uA 


+1 500 uA 


15 uA 



4.1 .9 Timing Measurements on contact 10 

To verify the timing of the lO transmission from the SIM the ME Simulator shall be able to measure the lO-Bit-Timing 
in CLK-Cycles with an accuracy of < 0.01 etu or 2 elk-cycles whichever is the worst. 



4.2 



lUT default conditions 



Unless otherwise stated, the following is default: 

- The voltage level for VCC (contact CI) is set to 5.0 V. 

The voltage levels for CLK (contact C3) are set to V and 5.0 V for low and high respectively. 

The clock frequency CLK (contact C3) is set to 5 MHz with duty cycle 50 %. 

The ME simulator generated low transmission voltage level for I/O (contact C7) is set to V and the current 
sources for high transmission and reception are set to +20 uA respectively 

- CHVl on the SIM is enabled and three VERIFY CHVl attempts and ten UNBLOCK CHVl attempts remain. 

- Three VERIFY CHV2 attempts and ten UNBLOCK CHV2 attempts remain for CHV2. 



4.3 Default data formatting 



All numeric data enclosed in single quotes (' ') in the present document are hexadecimal data. 

Where 'X' is used in place of a hexadecimal digit, X ranges from '0' to 'F'. For example, the data '6X' ranges from '60' to 
'6F' inclusive. 

Where data is expressed as a group of bytes, it shall be in the following format: 'XX XX XX... XX', indicating first byte, 
second byte, third byte etc. in that order. 
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4.4 Test definition and applicability 



The following statements are applicable to the Test definition and applicability clause for all test purposes contained 
within the present document: 

Unless otherwise stated, tests apply to both plug-in and ID-1 SIM cards. 



4.5 Test procedure 



The following statements are applicable to the Test Procedure clause for all test purposes contained within the present 
document: 

Unless otherwise stated, all steps with the test procedure are to be carried out in order. 

Where steps indicate that an ME simulator shall select a particular DF or EF using an unspecified number of 
SELECT commands, the ME simulator is to send the correct sequence of SELECT commands in order to select 
the required file ID from the current file ID (this may be achieved most easily by selecting from the MF down 
each time). 

- Unless otherwise stated, the length (P3) for all READ RECORD and UPDATE RECORD commands sent by the 
ME simulator is to be that of the record length of the EF currently selected. In the case where an EF is not 
currently selected, the length sent is to be 1 unless otherwise stated. 

- Unless otherwise stated, the offset for all READ BINARY and UPDATE BINARY commands sent by the ME 
simulator is to be '00 00'. 

- Unless otherwise stated, the length (P3) for all STATUS and GET RESPONSE commands sent by the ME 
simulator is to be such that all available data is read. 

- Unless otherwise stated, the CHV and UNBLOCK CHV presented for VERIFY CHV, CHANGE CHV, 
DISABLE CHV, ENABLE CHV and UNBLOCK CHV commands sent by the ME simulator is to be correct. 

- Unless otherwise stated, the "CHV No." (P2) for VERIFY CHV, CHANGE CHV, DISABLE CHV, ENABLE 
CHV and UNBLOCK CHV commands sent by the ME simulator is to be 1. 



4.6 Test requirement 



Where steps within a test procedure involve an ME simulator sending one or more commands to the SIM, these 
commands are required to be correctly executed, with the SIM responding with status conditions of '90 00' or '9F XX', 
unless otherwise stated in the Test Requirements subclause for the test. 



Test Group Hierarchy 



This clause contains the Test Group Hierarchy diagrams which provide a structure for the test purposes and also a 
correlation between the base specification, ICS and this Test Specification. 

The information contained in each node for each of the diagrams is as follows: 



mnemonic for test group 



reference to clause in TS 



As the Test Group Hierarchy for the SIM is large, it has been broken into sections to aid presentation. 
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5.1 Test groups under SIM 
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Figure 1 : Top Level Test Group Hierarchy 

The mnemonics chosen for this test group are as follows: 

- PHY: Physical characteristics - GSM 11.11 [1], clause 4. 

ELEC: Electronic signals and transmission protocols - GSM 11.11 [1], clause 5. 

- LOG: Logical Model - GSM 11.11 [1], clause 6. 

- SEC: Security features - GSM 11.11 [1], clause 7. 

- FN: Description of the functions - GSM 11.11 [1], clause 8. 

- CMD: Description of the commands - GSM 11.11 [1], clause 9. 

- CEF: Contents of the elementary files - GSM 11.11 [1], clause 10. 

- APP: Application Protocol - GSM 11.11 [1], clause 11. 

The Test Groups "PHY", "ELEC", "LOG", "SEC", "CMD", "CEF" and "APP", shown in figure 1, are broken down 
further, as shown in the following diagrams. 



5.2 Test groups under PHY 
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Figure 2: Brealtdown of "PHY" Test Group 

The mnemonics chosen for this test group are as follows: 

- FMT: Format and layout - GSM 11.11 [1], subclause 4.1. 

- ID1:ID-1 card -GSM 11.11 [1], subclause 4.1.1. 

- PIC: Plug-in card -GSM 11.11 [1], subclause 4.1.2. 

TMP: Temperature range for card operation - GSM 11.11 [1], subclause 4.2. 
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CNT: Contacts - GSM 11.11 [1], subclause 4.3. 



5.3 Test groups under ELEC 
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Figure 3: Breakdown of "ELEC" Test Group 

The mnemonics chosen for this test group are as follows: 

- VCC: Supply voltage Vcc (contact CI) - GSM 11.11 [1], subclause 5.1. 

- RST: Reset RST (contact C2) - GSM 11.11 [1], subclause 5.2. 

- CLK: Clock CLK (contact C3)- GSM 11. 11 [1], subclause 5.4. 

- 10: I/O (contact C7)- GSM 11.11 [1], subclause 5.5. 

- STAT: States - GSM 11.11 [1], subclause 5.6. 

- ATR: Answer To Reset (ATR) - GSM 11.11 [1], subclause 5.8. 

- MAJ: Major Capabilities - GSM 11.11 [1], clause 5, subclauses 5.7, 5.9 and 5.10. 

5.4 Test groups under LOG 
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Figure 4: Brealtdown of "LOG" Test Group 

The mnemonics chosen for this test group are as follows: 

- FID: File identifier - GSM 11.11 [1], subclause 6.2. 

- DF: Dedicated Files - GSM 11.11 [1], subclause 6.3. 

- EF: Elementary Files - GSM 11.11 [1], subclause 6.4. 

- SELFILE: Methods for selecting a file - GSM 11.11 [1], subclause 6.5. 

- RSVD: Reservation of file IDs - GSM 11.11 [1], subclause 6.6. 
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5.5 Test groups under SEC 
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Figure 5: Breakdown of "SEC" Test Group 

The mnemonics chosen for this test group are as follows: 

AUTH: Authentication and cipher key generation procedures - GSM 11.11 [1], subclause 7.1. 
ALG: Algorithms and processes - GSM 11.11 [1], subclause 7.2. 
FAC: File access conditions - GSM 11.11 [1], subclause 7.3. 



5.6 Test groups under FN 
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Figure 6: Brealtdown of "FN" Test Group 

All of the tests in the "FN" test group relate to GSM 11.11 [1], clause 8. 

5.7 Test groups under CMD 
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Figure 7: Breaitdown of "CIUID" Test Group 

The mnemonics chosen for this test group are as follows: 

- MAP: Mapping principles - GSM 11.11 [1], subclause 9.1. 

- COD: Coding of the commands - GSM 11.11 [1], subclause 9.2. 

- DBF: Definitions and coding - GSM 1 1.1 1 [1], subclause 9.3. 

- SC: Status conditions returned by the SIM - GSM 11.11 [1], subclause 9.4. 
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SW: Coding of the status words- GSM 11.11 [1], subclause 9.4.1 to 9.4.5. 

CSR: Commands versus possible status responses - GSM 11.11 [1], subclause 9.4.6. 



5.8 Test groups under CEF 
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Figure 8: Breakdown of "CEF" Test Group 

The mnemonics chosen for this test group are as follows: 

- MF: Contents of the EFs at the MF level - GSM 1 1 . 1 1 [ 1 ] , subclause 10.1. 

- GSM: Contents of EFs at the GSM application level - GSM 11.11 [1], subclause 10.2. 

- TEL: Contents of the EFs at the Telecom level -GSM 11.11 [1], subclause 10.3. 

5.9 Test groups under APP 

[TBD] 
Figure 9: Brealtdown of "APP" Test Group 

All of the tests in the "APP" test group relate to GSM 11.11 [1], clause 11. 

6 Test Procedure 

This clause details each of the tests in each of the test groups within the Test Group Hierarchy. This test suite allows 
testing of the lUT against the base specification with respect to: 

Physical characteristics. 

Electronic signals and transmission protocols. 

Logical model. 

Security services and facilities. 

Functions. 

Commands. 

Contents of the elementary files. 

The numbering of this clause correlates with the numbering of the accompanying ICS to allow for referencing between 
the documents. 



6.1 Physical characteristics 



The tests in this subclause ensure that the lUT conforms to the specification for both format and layout and contacts. 
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6.1.1 Format and layout 

6.1.1.1 ID-1 SIM 

6.1.1.1.1 Definition and applicability 

The format and layout characteristics shall be adhered to, in order to ensure proper operation in the GSM environment. 

This test applies to ID-1 SIM cards. 

Currents defined as positive are flowing into the SIM. 

Voltages declared as Vq are delivered by the ME (ME Simulator) Vj is generated by the SIM. 

6.1.1.1.2 Conformance requirement 

CRl: Format and layout of the ID-1 card shall be in accordance with GSM 11.11 [1], unless otherwise specified. 

CR2: The information on the exterior of the ID-1 SIM card shall include at least the individual account identifier 
and the check digit. 

CR3: The card may have a polarization mark which indicates how the user should insert the card into the ME. 

CR4: Any embossing on the card shall be in accordance with GSM 11.11 [1] (conditional). 

CR5: The contacts shall be located on the front (embossed face) of the card. 
Reference: GSM 11.11 [1], clause 4, subclauses 4. 1 and 4.1.1. 
Test Group Reference (TGR): TGR_SIM_PHY_FMT_ID1. 
Test Procedure Reference (TPR): TPR_SIM_PHY_FMT_ID1. 

6.1.1.1.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

NOTE 1 : The testing of CRl is outside the scope of the present document. NOTE 2: The testing of CR4 is 
outside the scope of the present document 

6.1.1.1.4 Method of test 
Initial conditions 

None. 

Test procedure 

a) The card is examined for the following: 

identification number; 

polarization mark; 

contact location. 
The card shall have been observed to exhibit the following [CR2,3]: 

identification number located on the exterior of the card; 
- polarization mark indicating how the user should insert the card into the ME; 

contact location on the front or the back of the card. 

b) The SIM is connected to an ME simulator. 
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c) The ME simulator resets the SIM. 

d) The ME simulator sends a SELECT command to the SIM to select EFjccid- 

e) The ME simulator sends a READ BINARY command to the SIM to read the identification number. 

The individual account identifier read from the SIM shall be identical with that on the exterior of the card 
[CR2]. 

6.1.1.2 Plug-in SIM 

6.1 .1 .2.1 Definition and applicability 

The format and layout characteristics shall be adhered to, in order to ensure proper operation in the GSM environment. 
This test applies to plug-in SIM cards. 

6.1 .1 .2.2 Conformance requirement 

CRl: Format and layout of the plug -in card shall be in accordance with GSM 11.11 [1] unless otherwise 
specified. 

CR2: The information on the exterior of the plug-in card shall include at least the individual account identifier 
and the check digit. 

CR3: The dimensions of the plug -in SIM shall be in accordance with annex A of GSM 11.11 [1]. 

Reference: GSM 11.11 [1], clause 4, subclauses 4.1 and 4.1.2. 

Test Group Reference (TGR): TGR_SIM_PHY_FMT_PIC. 

Test Procedure Reference (TPR): TPR_SIM_PHY_FMT_PIC. 

6.1.1.2.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

NOTE: The testing of CRl is outside the scope of the present document. 

6.1.1.2.4 Method of test 
Initial conditions 

None. 

Test procedure 

a) The card is examined for the following: 

individual account identifier and check digit; 
width; 
height; 
thickness; 

feature for orientation. 
The card shall have been observed to exhibit the following [CR2]: 

at least the individual account identifier and check digit located on the exterior of the card; 
correct width, height and thickness; 
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- feature for orientation. 

b) The SIM is connected to an ME simulator. 

c) The ME simulator resets the SIM. 

d) The ME simulator sends a SELECT command to the SIM to select EFiccid- 

e) The ME simulator sends a READ BINARY command to the SIM to read the identification number. 

The account identifier and check digit read from the SIM shall be present and identical with that on the exterior 
of the card [CR2]. 

6.1 .2 Temperature range for card operation 

6.1 .2.1 Definition and applicability 

The temperature range for full operational use shall be adhered to, in order to ensure proper operation in the GSM 
environment. 

6.1.2.2 Conformance requirement 

CRl: The temperature range for full operational use shall be between -25°C and +70°C with occasional peaks of 
up to +85°C, where "occasional" means not more than 4 hours each time and not over 100 times during the life 
time of the card. 

Reference: GSM 11.11 [1], subclause 4.2. 

Test Group Reference (TGR): TGR_SIM_PHY_TMP. 

Test Procedure Reference (TPR): TPR_SIM_PHY_TMP. 

6.1.2.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

6.1.2.4 Method of test 

Initial conditions 

1) The SIM is placed in a temperature-controllable environment and connected to an ME simulator. 

2) A temperature measuring device is connected to the surface of the SIM. 

3) The SIM shall have passed the Format and Layout tests in subclause 6.1.1. 
Test procedure 

a) The temperature of the SIM is set to +25°C. 

b) The ME simulator resets the SIM. 

c) The ME simulator performs the SIM initialization procedure, as defined in GSM 11.11 [1], subclause 11.2.1. 
The SIM shall operate successfully [CRl]. 

d) The temperature of the SIM is reduced to -25°C. 

e) Steps b) and c) are repeated. 

The SIM shall operate successfully [CRl]. 

f) The temperature of the SIM is increased to +70°C. 
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g) Steps b) and c) are repeated. 

The SIM shall operate successfully [CRl]. 
h) The temperature of the SIM is increased to +85°C. 
i) Steps b) and c) are repeated continually for a period of 4 hours. 

The SIM shall operate successfully [CRl]. 

The SIM shall have satisfied the test requirements of subclause 6.1.1. 
j) The temperature of the SIM is reduced to +25°C. 
k) Steps h), i) and j) are repeated a further 99 times. 

The SIM shall operate successfully [CRl]. 
1) Carry out the tests in subclause 6.1.1 again. 

6.1.3 Contacts 

6.1 .3.1 Definition and applicability 

The shape, robustness and provision of contacts shall be adhered to, in order to maintain good electrical contact with the 
ME, ensuring proper operation in the GSM environment. 

6.1.3.2 Conformance requirement 

CR2: Contact C6 shall not be bonded in the SIM for any function other than supplying Vpp. 
Reference: GSM 11.11 [1], subclause 4.3.1 and4.3.4. 
Test Group Reference (TGR): TGR_SIM_PHY_CNT. 
Test Procedure Reference (TPR): TPR_SIM_PHY_CNT. 

6.1.3.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

NOTE: As the contacts specified in CRl and CR3 are optional, the tests specified here shall only be performed on 
those contacts when the contacts are present. 

6.1.3.4 Method of test 

Initial conditions 

1) The SIM shall have passed the Format and Layout tests in subclause 6.1.1. 
Test procedure 

a) Contact C6 is connected to ground by the ME simulator. 

b) VCC is applied to contact CI. 

c) Contact C2 (RST) is kept at low level, ground. 

d) A valid clock signal is applied to Contact C3. 

The dc power consumption on Contact CI shall not exceed 10 niA under any condition [CR2]. 

NOTE: This test ensures that VPP and VCC are not bonded together in the SIM, if this would be the case VPP 
would also supply the SIM with current for its operation. 
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e) The SIM is connected to an ME simulator. 

f) The ME simulator resets the SIM. 

The SIM shall have been reset successfully [CR4]. 

6.2 Electronic signals and transmission protocols 

The tests in this subclause ensure that the lUT conforms to the electrical specification for each of the contacts and also 
the protocol. 

6.2.1 Supply voltage Vcc (contact C1 ) 
6.2.1.1 Voltage limits 



6.2.1.1.1 



Definition and applicability 



In addition to the electronic signals and transmission protocols defined in ISO/IEC 7816-3 [5], the SIM shall operate 
within the following supply voltage conditions to ensure proper operation in the GSM environment. 

This test applies to all SIM implementations with 1.8 V, 3 V and 5 V interfaces. 

6.2.1 .1 .2 Conformance requirement 

CRl: The SIM shall operate when the supply voltage on contact CI (Vcc) is in the following ranges: 



Card Type 


Vmin /V 


Vmax /V 


5 V type 


4.5 


5.5 


3 V type 


2.7 


3.3 


1 .8 V type 


1.62 


1.98 



Reference: GSM 11.11 [1], subclause 5.1. 

Test Group Reference (TGR): TGR_SIM_ELEC_VCC. 

Test Procedure Reference (TPR): TPR_SIM_ELEC_VCC_V. 

6.2.1.1.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

6.2.1.1.4 Method of test 
Initial conditions 

1) The SIM is connected to an ME simulator. 

2) The CHVl value is 4 zeros. 
Test procedure 

(The voltage Vcc min/max depends on the voltage class the SIM provides) 

a) The voltage source for contact CI (Vcc) is set to Vcc min, and the SIM interface signals are powered from a 
Vcc min, source. 

b) The ME simulator resets the SIM. 

The SIM shall send the correct ATR sequence [CRl]. 

c) The ME simulator sends a CHANGE CHV command to the SIM with new CHVl value 8 zeros. 
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d) The ME simulator sends a CHANGE CHV command to the SIM to return the CHVl to its original value. 

e) The voltage source for contact CI (Vcc) is set to Vcc max. 

f) The ME simulator resets the SIM. 

The SIM shall send the correct ATR sequence [CRl]. 

g) The ME simulator sends a CHANGE CHV command to the SIM with new CHVl value 8 zeros. 

h) The ME simulator sends a CHANGE CHV command to the SIM to return the CHVl to its original value, 
i) Repeat the test for every voltage class the SIM provides. 

6.2.1.2 Current limits 

6.2.1 .2.1 Definition and applicability 

In addition to the electronic signals and transmission protocols defined in ISO/IEC 7816-3, the current consumption 
shall not exceed the specified limit under normal operating conditions to ensure proper operation in the GSM 
environment. 

Table 1 : Current consumption on VCC 



Card Type 


Imax /mA 
under normal conditions 
(average value (see note)) 


fmax/MhZ 

(max CLK-frequency under 
normal conditions) 


VCCmax 

voltage on VCC during 
testing 


5 V type 


10 


5 


5,5V 


3 V type 


6 


4 


3,3V 


1 .8 V type 


4 


4 


1,98V 


NOTE: Imax is the average value of the Vcc Current including the current spikes!. 



Table 2: Current spikes on VCC 



Card Type 


Lax /mA 


max charge /nAs 


max duration /ns 


5 V type 


200 


40 


400 


3 V type 


60 


12 


400 


1 .8 V type 


60 


12 


400 



6.2.1.2.2 



Conformance requirement 



CRl: The current consumption of the SIM shall not exceed the max currents values (Imax) as defined in tables 1 
and 2 at the max. frequency (fmax;) and the max. allowed voltage level Vmax- 

Reference: GSM 11.11 [1], subclause 5.1. 

Test Group Reference (TGR): TGR_SIM_ELEC_VCC. 

Test Procedure Reference (TPR): TPR_SIM_ELEC_VCC_I. 

6.2.1.2.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

6.2.1.2.4 Method of test 
Initial conditions 

1) The SIM is connected to an ME simulator. 

2) A current measuring device is connected to the SIM. 



£75/ 



25 



ETSI TS 101 086 V8.2.0 (2005-06) 



3) The CHVl value is 4 zeros. 
Test procedure 

a) The frequency of the clock source is set to 1 MHz. 

b) The ME simulator resets the SIM. 

c) The ME simulator performs the SIM initialization procedure during which time the current consumption is 
measured. 

d) The ME simulator sends a CHANGE CHV command to the SIM with new CHVl value 8 zeros. 

e) The ME simulator sends a CHANGE CHV command to the SIM to return the CHVl to its original value. 

f) The frequency of the clock source is set to 3.25 MHz. 

g) The ME simulator resets the SIM. 

h) The ME simulator performs the SIM initialization procedure during which time the current consumption is 
measured. 

i) The ME simulator sends a CHANGE CHV command to the SIM with new CHVl value 8 zeros. 

j) The ME simulator sends a CHANGE CHV command to the SIM to return the CHVl to its original value. 

k) The frequency of the clock source is set to f^iax 

1) The ME simulator resets the SIM. 

m) The ME simulator performs the SIM initialization procedure during which time the current consumption is 
measured. 

n) The ME simulator sends a CHANGE CHV command to the SIM with new CHVl value 8 zeros. 

o) The ME simulator sends a CHANGE CHV command to the SIM to return the CHVl to its original value. 

p) Repeat tests a) to o) for all voltage classes the SIM delivers. 

The current consumption of the SIM shall not exceed the max.current values given in tables 1 and 2 according to 
the SIM class excluding spikes up to the defined maximum charges, durations and amplitudes during the whole 
test. 

6.2.1.3 Idle current limits 

6.2.1 .3.1 Definition and applicability 

In addition to the electronic signals and transmission protocols defined in ISO/IEC 7816-3 [5], the current consumption 
shall not exceed the specified limit under idle conditions to ensure proper operation in the GSM environment. 

Table 3: Current consumption in idle mode 



Card Type 


Imax /uA in idle state cll< frequency 
1 IMHz 


VCCmax/V 

max. voltage on VCC during testing 


5 V type 


200 


5,5 


3 V type 


200 


3,3 


1 .8 V type 


200 


1,98 



6.2.1.3.2 Conformance requirement 

CRl : The idle current consumption of the SIM shall not exceed l,^,^ at 1 MHz , +25 °C and V^ 
Reference: GSM 11.11 [1], clause 5 and subclause 5.1. 
Test Group Reference (TGR): TGR_SIM_ELEC_VCC. 
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Test Procedure Reference (TPR): TPR_SIM_ELEC_VCC_IDLE. 

6.2.1.3.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

6.2.1.3.4 Method of test 
Initial conditions 

1) The SIM is connected to an ME simulator. 

2) The frequency of the clock source is set to 1 MHz. 

3) The temperature of the SIM is +25 °C. 

4) The voltage on VCC is set to VCCmax 
Test procedure 

a) The ME simulator resets the SIM. 

b) The idle current consumption is measured after receiving the ATR over a period of 10 s. 

c) Repeat test for all voltage classes the SIM supports. 

6.2.1.3.5 Test requirement 

1) During step b), the current consumption of the SIM shall not exceed I^ax 

6.2.1 .4 Current limits at all frequencies 

6.2.1 .4.1 Definition and applicability 

In addition to the electronic signals and transmission protocols defined in ISO/IEC 7816-3 [5], the current consumption 
shall not exceed the specified limit under idle conditions to ensure proper operation in the GSM environment. 

Table 4: Current consumption in idle mode at max frequency 



Card Type 


Imax /uA in idle state 
(average value) 


VCCmax/V 

max. voltage on VCC during 
testing 


fmax/MhZ 

max CLK frequency in idle mode 


5 V type 


1 000 


5.5 


5 


3 V type 


1 000 


3.3 


4 


1 .8 V type 


1 000 


1.98 


4 



6.2.1.4.2 Conformance requirement 

1) The idle current consumption of the SIM shall not exceed Imax at any frequency fmax. 
Reference: GSM 11.11 [1], subclause 5.1. 
Reference: ETS 300 641 [10], clause 5. 
Test Group Reference (TGR): TGR_SIM_ELEC_VCC. 
Test Procedure Reference (TPR): TPR_SIM_ELEC_VCC_IF. 

6.2.1.4.3 Test purpose 

To verify that the SIM conforms to the above requirements. 
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6.2.1.4.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 

a) The frequency of the clock source is set to 1 MHz. 

b) The ME simulator resets the SIM. 

c) The current consumption is measured after receiving the ATR over a period of 10 s. 

d) The frequency of the clock source is set to 3.25 MHz. 

e) The ME simulator resets the SIM. 

f) The current consumption is measured after receiving the ATR over a period of 10 s. 

g) The frequency of the clock source is set to f^ax- 
h) The ME simulator resets the SIM. 

i) The current consumption is measured after receiving the ATR over a period of 10 s. 

The current consumption of the SIM shall not exceed 1mA [CRlin average over the whole test. 

6.2.1 .5 Current limits in elk-stop-mode 



6.2.1.5.1 



Definition and applicability 



In addition to the electronic signals and transmission protocols defined in ISO/IEC 7816-3 [5], the current consumption 
shall not exceed the specified limit under elk-stop conditions to ensure proper operation in the GSM environment. 

Table 5: Current consumption in clit stop mode 



Card Type 


Imax /uA in elk-stop mode 
(average value) 


VCCmax/V 

max. voltage on VCC during testing 


5 V type 


200 


5.5 


3 V type 


100 


3.3 


1 .8 V type 


100 


1.98 



6.2.1.5.2 



Conformance requirement 



1) The elk stop mode current consumption of the SIM shall not exceed I^j^x if elk stop mode is delivered by the 
SIM. 

Reference: GSM 11.11 [1], subclause 5.1. 

Reference: ETS 300 641 [10], clause 5. 

Test Group Reference (TGR): TGR_SIM_ELEC_VCC. 

Test Procedure Reference (TPR): TPR_SIM_ELEC_VCC_CLKSTOP. 

6.2.1.5.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

6.2.1.5.4 Method of test 
Initial conditions 
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1) The SIM is connected to an ME simulator. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends a SELECT command to the SIM to select the MF. 

c) The ME simulator sends a GET RESPONSE command to the SIM using the SW2 returned by the SIM following 

step b). 

d) The ME simulator stops the clock at least 744 elk according to the clock stop mode read in step c). 
f) The current consumption is measured during elk stop for min 10 s. 

The current consumption of the SIM shall not exceed I^^ in average during elk stop. 



6.2.2 Reset RST (contact C2) 
6.2.2.1 Static operation 



6.2.2.1.1 



Definition and applicability 



In addition to the electronic signals and transmission protocols defined in ISO/IEC 7816-3 [5], the SIM shall operate 
within the following limits regarding the reset RST signal to ensure proper operation in the GSM environment. 

6.2.2.1.2 Conformance requirement 

CRl: The SIM shall operate within the following limits for RST: 

Table 6 



Card Type 


Vol min/V 


Vol max/V 


loL max/uA 


VoH min/V 


VoH max/V 


loH max/uA 


5 V type 


-0.3 


0.6 


-200 


0.7 X Vcc 


Vcc + 0.3 V 


+20 


3 V type 


-0.3 


0.2XVCC 


-200 


0.8 X VCC 


Vcc + 0.3 V 


+20 


1 .8 V type) 


-0.3 


0.2 X VCC 


-200 


0.8 X VCC 


Vcc + 0.3 V 


+200 



tR and tp shall not exceeding 400 |is, with Cout and Cin equal to 30 pF. 
Reference: GSM 11.11 [1], subclause 5.2. 
Reference: ETS 300 641 [10], clause 5. 
Test Group Reference (TGR): TGR_SIM_ELEC_RST. 
Test Procedure Reference (TPR): TPR_SIM_ELEC_RST_ST. 

6.2.2.1.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

6.2.2.1.4 Method of test 
Initial conditions 

1) The SIM is connected to an ME simulator. 

2) A current measuring device is connected to RST (contact C2) of the SIM. 

3) The capacitance, Gin, of RST (contact C2) is measured to be 30 pF. 
Test procedure 



ETSI 



29 



ETSI TS 101 086 V8.2.0 (2005-06) 



a) The following parameters are set for RST: 

VoH of the RST signal is set to Vqh min. 
Vol of the RST signal is set to Vql min. 
tR and tp are set to 400 |iS. 

b) The ME simulator resets the SIM. 

c) The following parameters are set for RST: 

- VOH of the RST signal is set to WOU^^. 

- VOL of the RST signal is set to VOL^,,^. 

- tR and tF are set to 400 |iS. 

d) The ME simulator resets the SIM. 

e) Repeat the test for all voltage classes the card supports. 
The following shall be true for all tests: 

loLmax '■* measured to be less than or equal to Iql max [CRlb,c]. 
loHmax is measured to be less than or equal to Iqh max [CRla,c]. 

6.2.3 Clock CLK (contact C3) 
6.2.3.1 Frequency and duty cycle 



6.2.3.1.1 



Definition and applicability 



In addition to the electronic signals and transmission protocols defined in ISO/IEC 7816-3 [5], the SIM shall operate 
within the following limits regarding the reset RST signal to ensure proper operation in the GSM environment. 

This test applies to all SIM implementations with 5 V interface. 

6.2.3.1.2 Conformance requirement 

CRl: The SIM shall not support an internal clock. 

CR2: The SIM shall support a duty cycle between 40 % and 60 % of the period during stable operation. 
- CR3: The SIM shall operate within the following limits for CLK: 

Table 7 



Card Type 


Vol min/V 


Vol max/V 


VoH min/V 


VoH max/V 


Tr & Tf max 


fmax /MHz 


5 V type 


-0.3 


0.5 


0.7 X Vcc 


Vcc + 0.3 V 


9 % with a max. of 0.5 us 


5 


3 V type 


-0.3 


0,2 X VCC 


0.8 X VCC 


Vcc + 0.3 V 


50 ns 


4 


1 .8 V type 


-0.3 


0,2 X VCC 


0.8 X VCC 


Vcc + 0.3 V 


50 ns 


4 


NOTE: Tr and Tf has to be measured between 1 % and 90 % of Vol and Voh; Cin is equal to 30 pF. 



Reference: GSM U.U [1], subclause 5.4. 

Reference: ETS 300 641 [10], clause 5. 

Test Group Reference (TGR): TGR_SIM_ELEC_CLK. 

Test Procedure Reference (TPR): TPR_SIM_ELEC_CLK_FREQ. 
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6.2.3.1.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

6.2.3.1.4 Method of test 
Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 

a) The frequency of the clock source is set to IMHz. 

b) The duty cycle of the clock source is set to 40 % high. 

VoH is set to VoHinax,; Vql is set to VoLmin. 

c) The ME simulator resets the SIM. 

d) The duty cycle of the clock source is set to 60% high. 

e) The ME simulator resets the SIM. 

The SIM shall send the correct ATR sequence [CR1,3]. 

f) The frequency of the clock source is set to f^.^^ 

g) The duty cycle of the clock source is set to 40 % high, 
h) The ME simulator resets the SIM. 

The SIM shall send the correct ATR sequence [CR1,3]. 
i) The duty cycle of the clock source is set to 60 % high, 
j) The ME simulator resets the SIM. 

The SIM shall send the correct ATR sequence [CR1,3]. 
k) Repeat a) to i) with Vqh set to VoHmin; Vql set to VoLmax. 
1) Repeat a) to j) for all voltage classes supported by the SIM. 

6.2.3.2 Voltage and current 



6.2.3.2.1 



Definition and applicability 



In addition to the electronic signals and transmission protocols defined in ISO/IEC 7816-3 [5], the SIM shall operate 
within the following limits regarding the CLK signal to ensure proper operation in the GSM environment. 

6.2.3.2.2 Conformance requirement 

- CRl: The SIM shall operate within the following limits for CLK: 

Table 8 



Card Type 


Vol min/V 


Vol max/V 


loL max/uA 


VoH min/V 


VoH max/V 


loH max/uA 


Tr & Tf max 


fmax /MHz 


5 V type 


-0.3 


0.5 


-200 


0.7 X Vcc 


Vcc + 0.3 V 


-1-20 


9 % with a 
max. of 0.5 us 


5 


3 V type 


-0.3 


0.2XVCC 


-20 


0.7 X VCC 


Vcc + 0.3 V 


-h20 


50 ns 


4 


1 .8 V type 


-0.3 


0.2XVCC 


-20 


0.8 X VCC 


Vcc + 0.3 V 


-h20 


50 ns 


4 



Reference: GSM 11.11 [1], subclause 5.4. 
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Reference: ETS 300 641 [10], clause 5. 

Test Group Reference (TGR): TGR_SIM_ELEC_CLK. 

Test Procedure Reference (TPR): TPR_SIM_ELEC_CLK_VI. 

6.2.3.2.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

6.2.3.2.4 Method of test 
Initial conditions 

1) The SIM is connected to an ME simulator. 

2) A current measuring device is connected to CLK (contact C3) of the SIM. 

3) The capacitance of CLK (contact C3) is measured to be < 30 pF. 
Test procedure 

a) The clock signal is set to 1 MHz. 

b) The following parameters are set for CLK: 

- VoH at VoHmax. 

- Vol at VoLmin. 

tR and tp is set to t^max and tpmax. 

c) The ME simulator resets the SIM. 
The following shall be true: 

The SIM shall provide an ATR 

d) The following parameters are set for CLK: 

- VoH at VoHinin. 

- Vol at VoLmax. 

e) The ME simulator resets the SIM. 
The following shall be true: 

The SIM shall provide an ATR. 

f) Repeat test a) to e) with f^ii = f^^x, Tr = TRmax and Tp = Tfmax. 

g) Repeat test a) to f) for all voltage classes delivered by the SIM. 
The following shall be true for all tests: 

loHmax '■* measured to be less than or equal to +20jJiA [CRla]. 
loLmax '■* measured to be less than or equal to -200 jjA [CRlb]. 
The SIM shall provide an ATR after a reset 
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6.2.4 I/O (contact C7) 
6.2.4.1 Voltage and current 

6.2.4.1 .1 Definition and applicability 

In addition to the electronic signals and transmission protocols defined in ISO/IEC 7816-3 [5], the SIM shall operate 
within the following limits regarding the I/O signal to ensure proper operation in the GSM environment. 

6.2.4.1.2 Conformance requirement 

CRl: The SIM shall operate within the following limits for I/O: 

Table 9 



Card Type 


Vol min/V 


Vol max/V 


loL max/uA 


VoH min/V 


VoH max/V 


loH max/uA 


Tr & Tf max 


fmax /MHz 


5 V type 


-0.3 


0.5 


-1 000 


3.8 


Vcc + 0.3 V 


-h20 


1 us 


5 


3 V type 


-0.3 


0.4 


-1 000 


0.7 X VCC 


Vcc + 0.3 V 


-h20 


1 us 


4 


1 .8 V type 


-0.3 


0.3 


-1 000 


0.7 X VCC 


Vcc + 0.3 V 


-h20 


1 us 


4 



Table 10 



Card Type 


ViL min/V 


ViL max/V 


liL max/uA 


ViH min/V 


ViH max/V 


liH min/max 
/uA 


Tr & Tf max 


fmax MHz 


5 V type 


-0.3 


0.8 


+1 000 


0.7 X VCC 


Vcc + 0.3 V 


±20 


1 us 


5 


3 V type 


-0.3 


0.2 X VCC 


+1 000 


0.7 X VCC 


Vcc + 0.3 V 


±20 


1 us 


4 


1 .8 V type 


-0.3 


0.2 X VCC 


+1 000 


0.7 X VCC 


Vcc + 0.3 V 


±20 


1 us 


4 



Reference: GSM 11.11 [1], subclause 5.5. 

Reference: ETS 300 641 [10], clause 5. 

Test Group Reference (TGR): TGR_SIM_ELEC_IO. 

Test Procedure Reference (TPR): TPR_SIM_ELEC_IO_VI. 

6.2.4.1.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

6.2.4.1.4 Method of test 
Initial conditions 

1) The SIM is connected to an ME simulator. 

2) A current measuring device is connected to I/O (contact C7) of the SIM. 

3) The capacitance, Cout and Cin, of I/O (contact C7) is measured to be 30pF. 
Test procedure 

a) The ME simulator are set to the following max. ranges allowed by the SIM: 
Vcc to Vcc max. 
- Vol to Vol min, Vqh to Voh max. 
IiL to IiLmax, IiH to IiH max. 
Tr to Tr max and Tp to Tp maxb) 
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The ME simulator resets the SIM. 

c) The ME simulator sends a STATUS command to the SIM. 

d) The ME simulator is set to the minimum ranges allowed by the SIM with Vqh inactive: 

- Vcc to Vcc min. 

- Vol to Vol max, Vqh to Voh min. 
IiL to IiLmax, IiH to IiH min. 

Tr to Tr max and Tp to Tp max. 

e) The ME simulator resets the SIM. 

f) The ME simulator sends a STATUS command to the SIM. 

g) Repeat test a) to 1} for all voltage classes: 
Acceptance criteriumfor all tests: 

Iql has to be between niA and Iql max. 

Iqh has to be <Ioh max. 

ViL has to be between Vn min and V/l max. 

ViH has to be between Vjh min and V[h max. 

Tn and T^ generated by the SIM have to be <Tii and Tf max. 

6.2.5 States 

6.2.5.1 Definition and applicability 

There are two states for the while the power supply is on, operating state when the SIM is executing a command, and 
idle state at any other time. 

6.2.5.2 Conformance requirement 

CRl: The SIM shall support exactly one of these items: 

Clock stop allowed, no preferred level. 

Clock stop allowed, high level preferred. 

Clock stop allowed, low level preferred. 

Clock stop not allowed. 

Clock stop not allowed, unless at high level. 

Clock stop not allowed, unless at low level. 

CR2: When the SIM is in idle state, all pertinent data shall be retained. 

CR3: A SIM of Phase 2 or later shall always send the status information "normal ending of the command" after 
the successful interpretation of the command SLEEP received from a Phase 1 ME. 

Reference: GSM 11.11 [1], subclauses 5.6 and 9.2.1. 

Test Group Reference (TGR): TGR_SIM_ELEC_STAT. 

Test Procedure Reference (TPR): TPR_SIM_ELEC_STAT. 
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6.2.5.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

6.2.5.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends a SELECT command to the SIM to select the MF. 

c) The ME simulator sends a GET RESPONSE command to the SIM using the SW2 returned by the SIM following 
step b). 

The coding of bits 1, 3 and 4 of byte 14 in the response data shall be one in the table below only [CRl]. 

d) The ME simulator stops the clock according to the clock stop mode read in step c). 

e) The ME simulator pauses for 10 seconds, then starts the clock. 

f) The ME simulator sends a GET RESPONSE command to the SIM using the SW2 returned by the SIM following 
step b). 

The response data read shall be that indicating EFjccid- 

Table 11 



Biti 


Bits 


Bit 4 


Clock stop mode 


1 








Clock stop allowed, no preferred level 


1 


1 





Clock stop allowed, high level preferred 


1 





1 


Clock stop allowed, low level preferred 











Clock stop not allowed 





1 





Clock stop only allowed on high level 








1 


Clock stop only allowed on low level 



6.2.6 Answer To Reset (ATR) 
6.2.6.1 ATR content 



6.2.6.1.1 



Definition and applicability 



The ATR is information presented by the SIM to the ME at the beginning of the card session and gives operational 
requirements. 

6.2.6.1.2 Conformance requirement 

CRl: The ATR consists of at the most 33 characters. 
- CR2: Initial character TS is sent by the SIM. 
CR3: Format character TO is sent by the SIM. 
CR4: Interface character (global) TAl is sent by the SIM (optional). 
CR5: Interface character (global) TBI is sent by the SIM (optional). 
CR6: Interface character (global) TCI is sent by the SIM (optional). 
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CR7: Interface character TDl is sent by the SIM (optional). 

CR8: Interface character (specific) TA2 is sent by the SIM (optional). 

CR9: Interface character (global) TB2 is never sent by the SIM. 

CRIO: Interface character (specific) TC2 is sent by the SIM (optional). 

CRll: Interface character TDi is sent by the SIM (optional). 

CR12: Interface characters TAi, TBi, TCi (i>2) are sent by the SIM (optional). 

CR13: Historical characters Tl, ..., TK are sent by the SIM (optional). 
- CR14: Check character TCK is sent by the SIM (conditional). 
Reference: GSM 11.11 [1], subclause 5.8.1. 
Test Group Reference (TGR): TGR_SIM_ELEC_ATR. 
Test Procedure Reference (TPR): TPR_SIM_ELEC_ATR_CON. 

6.2.6.1.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

6.2.6.1.4 Method of test 
Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 

a) The ME simulator resets the SIM. 

The SIM shall send the ATR sequence [CRl]. 

The total length of the ATR sequence shall not be more than 33 characters [CRl]. 

The following characters shall be present and in the following order: 

Initial character TS (CR2]. 

Format character TO [CR3]. 

Interface character (global) TAI, if its presence is indicated by TO [CR4]. 

Interface character (global) TBI, if its presence is indicated by TO [CR5]. 

Interface character (global) TCI, if its presence is indicated by TO [CR6]. 

Interface character TDl, if its presence is indicated by TO [CR7]. 

Interface character (specific) TA2, if its presence is indicated by TDl [CR8]. 

Interface character (specific) TC2, if its presence is indicated by TDl [CRIO]. 

Interface character TDi, if its presence is indicated by TD(i-l, i>l) [CRll]. 

Interface characters TAi, TBi, TCi if their presence is indicated by TD(i-l, i>2) [CR12]. 

Historical characters T1,...,TK, if their presence is indicated by TO [CR13]. 

Check character TCK, if an additional protocol type to T=0 is indicated by TDl [CR14]. 
PIl shall be equal to if TBI is sent [CR5]. 
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TCI shall be either or 255, if sent [CR6]. 

The SIM shall never send Interface character (global) TB2 [CR9]. 

6.2.6.2 PTS procedure 

6.2.6.2.1 Definition and applicability 

The ATR indicates which protocols are available for use during a session. The PTS procedure allows one of the 
available protocol types to be selected. 

6.2.6.2.2 Conformance requirement 

CRl: The SIM shall respond to a PTS-Request from the ME with a PTS-Response (optional). 
Reference: GSM 11.11 [1], subclause 5.8.2. 
Test Group Reference (TGR): TGR_SIM_ELEC_ATR. 
Test Procedure Reference (TPR): TPR_SIM_ELEC_ATR_PTS. 

6.2.6.2.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

6.2.6.2.4 Method of test 
Initial conditions 

1) The SIM is connected to an ME simulator. 
Test Procedure 

a) The ME simulator resets the SIM. 

The SIM shall send the correct ATR sequence. 

b) The ME simulator sends a PTS-Request to the SIM, selecting T=0 protocol. 
If the SIM supports PTS procedure it shall send a valid PTS-Response [CRl]. 

6.2.7 Major Capabilities 

6.2.7.1 Definition and applicability 

The SIM shall adhere to the electronic signals and transmission protocols defined in GSM 11.11 [1] and 
ISO/IEC 7816-3 [5] to ensure proper operation in the GSM environment. 

6.2.7.2 Conformance requirement 

CRl: Electronic signals and transmission protocols shall be in accordance with ISO/IEC 7816-3 [5] unless 
otherwise specified. 

CR2: The choice of the transmission protocol(s), to be used to communicate between the ME and the SIM, shall 
at least include that specified and denoted by T=0 in ISO/IEC 7816-3 [5]. 

CR3: The baudrate for all communications shall be: (clock frequency)/372. 

CR4: The bit/character duration and sampling time specified in ISO/IEC 7816-3 [5], subclauses 6.1.1 and 6.1.2, 
are valid for all communications. 

CR5: Error detection and character repetition is mandatory for the SIM for all communications. 
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Reference: GSM 11.11 [1], clause 5, subclauses 5.7, 5.9 and 5.10. 
Test Group Reference (TGR): TGR_SIM_ELEC_MAJOR. 
Test Procedure Reference (TPR): TPR_SIM_ELEC_MAJOR. 

6.2.7.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

NOTE: The testing of CRl, CR2, CR3, CR4 and CR5 is outside the scope of the present document. 

6.2.7.4 Method of test 

Initial conditions 

N/A 

Test procedure 

N/A 

6.2.7.5 Test requirement 

N/A 



6.3 Logical Model 



The tests in this subclause ensure that the lUT is tested against the specification of the logical structure, for a SIM, the 
code associated with it, and the structure of the files used. 

6.3.1 File identifier 

6.3.1.1 File-type identification 

6.3.1.1.1 Definition and applicability 

A file identifier is used to address or identify each specific file. 

6.3.1 .1 .2 Conformance requirement 

- CRl : For GSM, the Master File shall be coded as '3F 00'. 

CR2: For GSM, file type 7F' shall be used to identify Dedicated Files. 

CR3: For GSM, file type '2F' shall be used to identify Elementary Files under the Master File. 

CR4: For GSM, file type '6F' shall be used to identify Elementary Files under a Dedicated File. 
Reference: GSM 11.11 [1], subclause 6.2. 
Test Group Reference (TGR): TGR_SlM_LOG_FID. 
Test Procedure Reference (TPR): TPR_SIM_LOG_FID_FTI. 

6.3.1.1.3 Test purpose 

To verify that the SIM conforms to the above requirements. 
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6.3.1.1.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 

a) The ME simulator resets the SIM. 

b) For each file of GSM 11.11 [1], described in subclause 10.7, the ME simulator sends SELECT commands to the 
SIM to select the file and, if selected successfully, the ME simulator sends a GET RESPONSE command to the 
SIM. 

After each successful SELECT and GET RESPONSE, byte 7 of the response data shall conform to the following 
table: 



File ID 


Type of File 


'3F 00' 


'OF 


'7FXX' 


'02' 


'2FXX' 


'04' 


'6FXX' 


'04' 



6.3.1 .2 File ID assignments 

6.3.1 .2.1 Definition and applicability 

A file identifier is used to address or identify each specific file. There are a number of rules regarding file ID 
assignment. 

6.3.1.2.2 Conformance requirement 

CRl : A file ID is assigned at the time of creation of the file concerned. 

CR2: Two files under the same parent shall never have the same ID. 

CR3: A child and any parent, either immediate or remote, in the hierarchy shall never have the same ID. 
Reference: GSM 11.11 [1], subclause 6.2. 
Test Group Reference (TGR): TGR_SIM_LOG_FID. 
Test Procedure Reference (TPR): TPR_SIM_LOG_FID_FIA. 

6.3.1.2.3 Test purpose 

To verify that all files within the SIM structure conform to the above requirements. 

NOTE 1: CRl cannot be tested as the SELECT function requires the file ID in order to select files. 

NOTE 2: CR2 and CR3 cannot be tested due to the operation of the SELECT function which should only ever 
select a single file for a given file ID. 

6.3.1.2.4 Method of test 
Initial conditions 

N/A 

Test procedure 
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N/A 

6.3.1.2.5 Test requirement 

N/A 

6.3.2 Dedicated files 

6.3.2.1 Definition and applicability 

Dedicated Files provide a functional grouping of Elementary Files. In this way a structured hierarchy of files can be 
estabHshed on the SIM. 

6.3.2.2 Conformance requirement 

- CRl : The SIM shall contain DFgsm- 

CR2: The SIM shall contain DFtelecom (optional). 
Reference: GSM 11.11 [1], subclauses 6.3, 10.2 and 10.3. 
Test Group Reference (TGR): TGR_SIM_LOG_DF. 
Test Procedure Reference (TPR): TPR_SIM_LOG_DF. 

6.3.2.3 Test purpose 

To verify that the Dedicated Files within the SIM file structure conform to the above requirements. 

6.3.2.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends a SELECT command to the SIM to select DFqsm- 

The status condition returned by the SIM shall be SWl = '9F', SW2= 'XX' - length 'XX' of the response data [CRl]. 

c) The ME simulator resets the SIM. 

d) The ME simulator sends a SELECT command to the SIM to select DFtelecom- 

The status condition returned by the SIM shall be SWl = '9F', SW2= 'XX' - length 'XX' of the response data, if the 
SIM supports DFj-ELECOM' otherwise the status condition returned by the SIM shall be SWl = '94', SW2='04' -file 
ID not found [CR2]. 

6.3.3 Elementary files 

6.3.3.1 Definition and applicability 

Elementary Files structure the way in which information is held on the SIM and provide security on how this 
information is accessed. 
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6.3.3.2 Conformance requirement 

CRl : The total data length of the body of an EF with transparent structure shall be indicated in the header of the 
EF. 

CR2: The record length of an EF with linear fixed structure shall be indicated in the header of the EF. 

CR3: The record length multiplied by the number of records of an EF with linear fixed structure shall be 
indicated in the header of the EF. 

CR4: The SIM shall be able to access records within a linear fixed EF using all of the methods given in 
subclause 6.4.2. 

CR5: For an EF with cyclic structure, when all the records have been used for storage, then the next storage of 
data shall overwrite the oldest information. 

CR6: The SIM shall be able to access records within a cyclic EF using all of the methods given in 
subclause 6.4.3. 

Reference: GSM 11.11 [1], subclauses 6.4.1, 6.4.2 and 6.4.3. 

Test Group Reference (TGR): TGR_SIM_LOG_EF. 

Test Procedure Reference (TPR): TPR_SIM_LOG_EF. 

6.3.3.3 Test purpose 

To verify that the EFs within the SIM file structure conform to the above requirements. 
NOTE: CR4, CR5 and CR6 are tested in subclauses 6.5.5 and 6.5.6. 

6.3.3.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator, and the ME simulator has reset the SIM. 
Test procedure 

The following steps are performed for all EFs in figure 7 of GSM 11.11 [1], subclause 10.4. 

a) The ME simulator sends a SELECT command to select the required EF in the SIM. 

b) If the EF is successfully selected, the ME simulator sends a GET RESPONSE command to the SIM. 

c) The ME simulator fulfils the READ access condition of the EF. 

d) If the EF is transparent, the ME simulator sends a READ BINARY command to the SIM. The length used shall 
be that of bytes 3 and 4 of the response data in step b). 

The status condition returned by the SIM shall be SW1 = '90', SW2='00' - normal ending of command [CRl]. 

e) If the EF is transparent, the ME simulator sends a READ BINARY command with offset '00 01' to the SIM. The 
length used shall be that of bytes 3 and 4 of the response data in step b). 

The status condition returned by the SIM shall indicate an error [CRl]. 

f) If the EF is linear fixed or cyclic, the ME simulator sends a READ RECORD using ABSOLUTE mode with 
record 1 to the SIM. The length used shall be that of byte 15 of the response data in step b). 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR2]. 

g) If the EF is linear fixed or cyclic, the ME simulator sends a READ RECORD using ABSOLUTE mode to the 
SIM. The record length used shall be that of byte 15 of the response data in step b) and the record number shall 
be that of bytes 3 and 4 of the response data in step b) divided by the record length. 
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The status condition returned by the SIM shall be SW1 = '90', SW2='00' - normal ending of command [CR3]. 

h) If the EF is linear fixed or cyclic, the ME simulator sends a READ RECORD using ABSOLUTE mode to the 
SIM. The record length used shall be that of byte 15 of the response data in step b) and the record number shall 
be that of bytes 3 and 4 of the response data in step b) divided by the record length, plus 1 . 

The status condition returned by the SIM shall be SW1 = '94', SW2='02' - out of range (invalid address) [CR3]. 

6.3.4 Methods for selecting a file 

6.3.4.1 Definition and applicability 

The ME accesses information on the SIM navigating around the file structure by selecting DFs and EFs as required. 
There are a number of rules regarding which file elements may be selected from a given DF or EF. 

6.3.4.2 Conformance requirement 

CRl : Selection of a DF or MF shall set the current Directory on the SIM. 

CR2: After a selection of a DF or MF there shall be no current EF. 

CR3: After a selection of an EF, the current EF shall be set to this EF and the current Directory shall remain the 
DF or MF which is the parent of this EF. 

CR4: Any application specific command shall only be operable if it is specific to the current Directory. 

CR5: It shall be possible to select the following from the last selected file: 

a) any file which is an immediate child of the current Directory 

b) any DF which is an immediate child of the parent of the current DF 

c) the parent of the current Directory 

d) the current DF 

e) theMF 

NOTE: Reselection of the last selected file is allowed. 

CR6: It shall be possible to select any of the 'valid selections' in table 6, subclause 6.5 of GSM 11.11 [1] for each 
of the 'last selected file' entries. 

Reference: GSM 11.11 [1], subclause 6.5. 

Test Group Reference (TGR): TGR_SIM_LOG_SELFILE. 

Test Procedure Reference (TPR): TPR_SIM_LOG_SELFILE. 

6.3.4.3 Test purpose 

To verify that the SIM conforms to the above requirements with regard to file selection. 
NOTE: CR5 is tested for function RUN GSM ALGORITHM in subclause 6.5. 16. 

6.3.4.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 

a) The ME simulator resets the SIM. 
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b) The ME simulator sends SELECT commands to the SIM to select DFqsm- 

c) The ME simulator sends a STATUS command to the SIM. 

Bytes 5 and 6 of the response data shall indicate that DFqsm '■* the currently selected directory [CRl]. 

d) The ME simulator sends a READ BINARY command using a length of 1 byte to the SIM. 
The status condition returned by the SIM shall be SWl = '94', SW2='00' - no EF selected [CR2]. 

e) The ME simulator sends a SELECT command to the SIM to select EFlp. 

f) The ME simulator sends a GET RESPONSE command to the SIM. 

Bytes 5 and 6 of the response data shall indicate that EFip is the currently selected EF [CR3]. 

g) The ME simulator sends a STATUS command to the SIM. 

Bytes 5 and 6 of the response data shall indicate that DFqsm i'> the currently selected directory [CR3]. 
h) Step i) is carried out for each line in table 6, subclause 6.5 of GSM ILll [1]. 
i) Step j) is carried out for each one of the 'valid selections' in that line of the table, 
j) Steps k) then 1) are carried out in turn. 

k) The ME simulator sends SELECT commands to the SIM to select the 'last selected file'. 
1) The ME simulator sends a SELECT command to the SIM to select the 'valid selection'. 

The status condition returned by the SIM shall be SWl = '9F', SW2= 'XX' [CR5,6]. 

The following file IDs are used to represent the IDs in the table: 

Table 12: IDs 



Table 


Actual 


MF 


MF 


DF1 


DFtelecom 


DF2 


DFgsm 


EF1 


EFiccid 


EF2 


EFadn 


EF3 


EFlp 


EF4 


EFiMsi 



NOTE: When EFadn is not supported by the SIM, any supported EF in DFtelecom may be chosen. 

6.3.5 Reservation of file IDs 



6.3.5.1 



Definition and applicability 



In order to accommodate planned and possible future requirements, certain file IDs are considered reserved, and may 
not be used in the SIM file structure. 

6.3.5.2 Conformance requirement 

CRl: The following Dedicated File IDs are reserved for operational use by GSM: 

- '7F 10'. 

- '7F 2X'. 

CR2: The following Elementary File IDs are reserved for operational use by GSM: 
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- '2F IX' under MF. 

- '6F 2X\ '6F 3X' and '6F 4X' under '7F 10' and '7F 2X'. 

CR3: The following Dedicated File IDs are reserved for administrative use by GSM: 

- '7F 4X'. 

CR4: The following Elementary File IDs are reserved for administrative use by GSM: 

- '2F01', '2FEX'underMF. 

- '6F XX' under DFs '7F 4X'. 

- '6F IX' under '7F 10', '7F 20' and '7F 21'. 
Reference: GSM 11.11 [1], subclause 6.6. 

Test Group Reference (TGR): TGR_S1M_L0G_ RSVD. 
Test Procedure Reference (TPR): TPR_SIM_LOG_RSVD. 

6.3.5.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

NOTE: CR3 and CR4 cannot be tested as the administrative functionality is outside the scope of GSM 11.11 [ 1 ] . 

6.3.5.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 

a) The ME simulator resets the SIM. 

b) For all possible EFs on the SIM, the ME simulator sends SELECT commands to the SIM to select each EF in 
sequence. 

For all successful selections, the ID of the selected file shall be one of those in figure 7, clause 10 of 
GSM 11.11 [I] or shall not be one of those listed as reserved for operational use. [CR1,2] 

6.4 Security features 

The tests in this subclause ensure that the lUT conforms with the security aspects which are related to the SIM. 

6.4.1 Authentication and cipiner key generation procedure 

The authentication mechanism employed in the GSM system between the network and SIM to authenticate a SIM, 
results in a finite interaction with the SIM, through the use of the function RUN GSM ALGORITHM. In order to test 
the behaviour of the SIM during this authentication mechanism, it is sufficient to test the function which operates on the 
SIM during the authentication mechanism. The test procedure for the function itself shall be executed, as defined in 
subclause 6.5.16 ("RUN GSM ALGORITHM" function). 

6.4.2 File access conditions 
6.4.2.1 Definition and applicability 

Every file has its own specific access condition for each command which shall be fulfilled before the command can take 
place. 
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6.4.2.2 Conformance requirement 

CRl: For access condition ALWAYS, the command can be performed without any restriction. 

CR2: For access condition CHVl, the command shall only be possible if one of the following three conditions is 
fulfilled: 

a) A correct CHVl value has already been presented to the SIM during the current session. 

b) The CHVl enabled/disabled indicator is set to "disabled". 

c) UNBLOCK CHVl has been successfully performed during the current session. 

CR3: For access condition CHV2, the command shall only be possible if one of the following two conditions is 
fulfilled: 

a) a correct CHV2 value has already been presented to the SIM during the current session. 

b) UNBLOCK CHV2 has been successfully performed during the current session. 

CR4: For access condition NEVER, the command shall not be possible over the SIM/ME interface. 
Reference: GSM 11.11 [1], subclause 7.6. 
Test Group Reference (TGR): TGR_SIM_SEC_FAC. 
Test Procedure Reference (TPR): TPR_SIM_SEC_FAC. 

6.4.2.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

NOTE 1 : Allocation of ADM levels and the respective requirements for their fulfilment are the responsibility of the 
appropriate administrative authority. 

NOTE 2: CR2b and CR2c are tested in subclauses 6.5.11, 6.5.12 and 6.5.13. 

NOTE 3: CR3b is not tested here although the UNBLOCK CHV function in subclause 6.5. 13 intrinsically tests for 
CHV2. 

6.4.2.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 

2) EFadn is present and not invalidated. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends a SELECT command to the SIM to select EFjccid- 

c) The ME simulator sends a READ BINARY command to the SIM to read the first 1 byte in EFiccid- 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CRl]. 

d) The ME simulator sends SELECT commands to the SIM to select EFadn under DFtelecom- 

e) The ME simulator sends a READ RECORD command to the SIM to read the first record in EF^dn- 

The status condition returned by the SIM shall be SWl = '98 ', SW2 ='04' - access condition not fulfilled [CR2a]. 

f) The ME simulator gains CHVl security access. 

g) The ME simulator sends a READ RECORD command to the SIM to read the first record in EFadn- 
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The status condition returned by the SIM shall be SW1 = '90', SW2='00' - normal ending of command [CR2a]. 
h) The ME simulator sends an INVALIDATE command to the SIM to invalidate EFadn- 

The status condition returned by the SIM shall be SWl = '98 ', SW2 ='04' - access condition not fulfilled [CR3a]. 
i) The ME simulator gains CHV2 security access, 
j) The ME simulator sends an INVALIDATE command to the SIM to invalidate EFadn- 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR3a]. 

k) The ME simulator sends SELECT commands to the SIM to select EFiccid under MF. 

1) The ME simulator sends an UPDATE BINARY command to the SIM to update the byte in EFjccid with the byte 
read in step c). 

The status condition returned by the SIM shall be SWl = '98', SW2= '04' - access condition not fulfilled [CR4]. 



6.5 Description of the functions 



The tests in this subclause ensure that the lUT conforms to the functional specification for all the commands and their 
respective responses. 

6.5.1 SELECT function 

6.5.1 .1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [1] to support all functions described therein. 

6.5.1.2 Conformance requirement 

CRl: The SELECT function shall select a file according to the methods described in clause 6 of GSM 11.11 [1]. 

CR2: The function shall accept as an input, a file ID. 

CR3: If the selected file is the MF or a DF, then the function shall output the file ID, total memory space 
available, CHV enabled/disabled indicator and CHV status. 

CR4: If the selected file is an EF, then the function shall output the file ID, access conditions, invalidation 
indicator, structure of EF and the length of the records in the case of linear fixed or cyclic structure. 

CR5: The record pointer in a cyclic file shall address the last record which has been updated or increased. 

Reference: GSM 11.11 [1], subclause 8.1. 

Test Group Reference (TGR): TGR_SIM_FN. 

Test Procedure Reference (TPR): TPR_SIM_FN_SEL. 

6.5.1.3 Test purpose 

To verify that the SELECT function conforms to the above requirements for the different file types available. 
NOTE: CRl is tested in subclause 6.3.5. 

6.5.1.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 

2) The records in EFacm contain the following data: 
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Record 1: '11 11 11' (last updated record). 
Record 2: '22 22 22'. 
- Record 3: '33 33 33'. 
3) The record length of EFadn is known. 
Test procedure and Requirements 

a) The ME simulator resets the SIM. 

b) The ME simulator sends a SELECT command to select DFgsm- 

The status returned by the SIM shall be SWl = '9F', SW2= 'XX' - length 'XX' of the response data [CR2]. 

c) The ME simulator sends a GET RESPONSE command to the SIM. 
The following shall be true of the response data [CR3]: 

Bytes 5 and 6 shall indicate that DFgsm is the currently selected file. 

Byte 7 shall be '02 ' indicating a DF. 

Byte 13 shall be less than or equal to SW2 from step b) minus 13. 

Bit 8 of byte 14 shall be indicating that CHVl is enabled. 

Byte 15 shall indicate the correct number ofDFs which are a direct child ofOF^sM- 

Byte 16 shall indicate the correct number ofEFs which are a direct child of DFgsm- 

Bits 1 through 4 of byte 19 shall indicate three VERIFY CHVl attempts remaining. 

Bits 1 through 4 of byte 21 shall indicate three VERIFY CHV2 attempts remaining. 

Bits 1 through 4 of byte 20 shall indicate ten UNBLOCK CHVl attempts remaining. 

Bits 1 through 4 of byte 22 shall indicate ten UNBLOCK CHV2 attempts remaining. 

d) The ME simulator sends a SELECT command to the SIM to select the MF. 

e) The ME simulator sends a GET RESPONSE command to the SIM. 
The following shall be true of the response data [CR3]: 

Byte 7 shall be '01 ' indicating MF. 

Byte 15 shall indicate the correct number ofDFs which are a direct child ofMF. 

Byte 16 shall indicate the correct number ofEFs which are a direct child ofMF. 

f) The ME simulator sends a VERIFY CHV command with incorrect CHVl to the SIM. 

g) The ME simulator send a SELECT command to the SIM to select DFgsm- 
h) The ME simulator sends a GET RESPONSE command to the SIM. 

The following shall be true of the response data [CR3]: 

Bits 1 through 4 of byte 19 shall indicate two VERIFY CHVl attempts remaining. 
i) The ME simulator sends a DISABLE CHV command to the SIM. 
j) The ME simulator send a SELECT command to the SIM to select DFgsm- 
k) The ME simulator sends a GET RESPONSE command to the SIM. 

The following shall be true of the response data [CR3]: 
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Bit 8 of byte 14 shall be 1 indicating that CHVl is disabled. 

Bits 1 through 4 of byte 19 shall indicate three VERIFY CHVl attempts remaining. 
1) The ME simulator sends a SELECT command to the SIM to select the MF. 
m) The ME simulator sends a SELECT command to the SIM to select DFtelecom- 
n) The ME simulator sends a ENABLE CHV command to the SIM. 
o) The ME simulator sends a SELECT command to the SIM to select EFadn- 
p) The ME simulator sends a GET RESPONSE command to the SIM. 
The following shall be true of the response data [CR4]: 

Bytes 5 and 6 shall indicate that EFadn is the currently selected file. 

Bytes 9 through 11 shall state the access conditions in subclause 10.3.1 of GSM 11.11 [I]. 

Bit 1 of byte 12 shall be 1 indicating that the file is not invalidated. 

Byte 14 shall be '01 ' indicating linear fixed structure. 

Byte 15 shall indicate the length of the records. 
q) The ME simulator sends a VERIFY CHV command to the SIM with correct CHV2. 
r) The ME simulator sends an INVALIDATE command to the SIM. 
s) The ME simulator sends a SELECT command to the SIM to re-select EFadn- 
t) The ME simulator sends a GET RESPONSE command to the SIM. 
The response data shall indicate the following [CR4]: 

Bit 1 of byte 12 shall be indicating that the file is invalidated. 
u) The ME simulator sends a REHABILITATE command to the SIM. 
v) The ME simulator sends a SELECT command to the SIM to select DFqsm- 
w) The ME simulator sends a SELECT command to the SIM to select EFacm- 
x) The ME simulator sends a GET RESPONSE command to the SIM. 
The following shall be true of the response data [CR4]: 

Byte 14 shall be '03 ' indicating cyclic structure. 
y) The ME simulator sends a READ RECORD command using CURRENT mode to the SIM. 
The response data shall be '11 11 11 ' [CR5]. 

6.5.2 STATUS function 

6.5.2.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [1] to support all functions described therein. 

6.5.2.2 Conformance requirement 

CRl: The STATUS function shall output the file ID, total memory space available, CHV enabled/disabled 
indicator and CHV status of the currently selected MF or DF. 

Reference: GSM 11.11 [1], subclause 8.2. 
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Test Group Reference (TGR): TGR_SIM_FN. 

Test Procedure Reference (TPR): TPR_SIM_FN_STATUS. 

6.5.2.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

6.5.2.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure and Requirements 

a) The ME simulator resets the SIM. 

b) The ME simulator sends a SELECT command to select DFqsm- 

c) The ME simulator sends a STATUS command to the SIM. 
The following shall be true of the response data [CRl]: 

Bytes 5 and 6 shall indicate that DFcsm is the currently selected file. 

Byte 7 shall be '02 ' indicating a DF. 

Byte 13 shall be less than or equal to SW2 from step b) minus 13. 

Bit 8 of byte 14 shall be indicating that CHVl is enabled. 

Byte 15 shall indicate the correct number ofDFs which are a direct child ofOF^sM- 

Byte 16 shall indicate the correct number ofEFs which are a direct child ofDFgsM- 

Bits 1 through 4 of byte 19 shall indicate three VERIFY CHVl attempts remaining if CHVl is initialized. 

Bits 1 through 4 of byte 21 shall indicate three VERIFY CHV2 attempts remaining if CHV2 is initialized. 

Bits 1 through 4 of byte 20 shall indicate ten UNBLOCK CHVl attempts remaining if CHVl is initialized. 

Bits 1 through 4 of byte 22 shall indicate ten UNBLOCK CHV2 attempts remaining if CHV2 is initialized. 

d) The ME simulator sends a SELECT command to the SIM to select the MF. 

e) The ME simulator sends a STATUS command to the SIM. 
The following shall be true of the response data [CRl]: 

Byte 7 shall be '01 ' indicating MF. 

Byte 15 shall indicate the correct number ofDFs which are a direct child ofMF. 

Byte 16 shall indicate the correct number ofEFs which are a direct child ofMF. 

f) The ME simulator sends a VERIFY CHV command with incorrect CHVl to the SIM. 

g) The ME simulator send a SELECT command to the SIM to select DFqsm- 
h) The ME simulator sends a STATUS command to the SIM. 

The following shall be true of the response data [CRl]: 

Bits 1 through 4 of byte 19 shall indicate two VERIFY CHVl attempts remaining. 
i) The ME simulator sends a DISABLE CHV command to the SIM. 
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j) The ME simulator send a SELECT command to the SIM to select DFqsm- 
k) The ME simulator sends a STATUS command to the SIM. 
The following shall be true of the response data [CRl]: 

Bit 8 of byte 14 shall be 1 indicating that CHVl is disabled. 

Bits 1 through 4 of byte 19 shall indicate three VERIFY CHVl attempts remaining. 

6.5.3 READ BINARY function 

6.5.3.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [1] to support all functions described therein. 

6.5.3.2 Conformance requirement 

CRl: The READ BINARY function shall read a string of bytes from the current transparent EF. 

CR2: The function shall accept as an input, the relative address (offset) and the length (in bytes) of the string. 

CR3: The function shall output the string of bytes. 

CR4: The function shall only be performed if the READ access condition for the current EF is satisfied. 
Reference: GSM 11.11 [1], subclause 8.3. 
Test Group Reference (TGR): TGR_SIM_FN. 
Test Procedure Reference (TPR): TPR_SIM_FN_RDBIN. 

6.5.3.3 Test purpose 

To verify that the READ BINARY function conforms to the above requirements. 

6.5.3.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 

2) EFkc contains the data string: 'Al A2 A3 A4 A5 A6 A7 A8 A9'. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends SELECT commands to the SIM to select EFkc under DFgsm- 

c) The ME simulator sends a READ BINARY command using a length of 9 bytes to the SIM. 

The status condition returned by the SIM shall be SW1 = '98', SW2='04' - access condition not fulfilled [CR4]. 

d) The ME simulator sends a VERIFY CHV command to the SIM. 

e) The ME simulator sends a READ BINARY command using a length of 9 bytes to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CRl -4]. 
The data string returned shall be 'Al A2 A3 A4 A5 A6 A7 A8 A9' [CRl -4]. 

f) The ME simulator sends a READ BINARY command using a length of 1 byte to the SIM. 
The data string returned shall be 'Al '. 
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g) The ME simulator sends a READ BINARY command using an offset of '00 01' and length 8 byte to the SIM. 

The data string returned shall be 'A2 A3 A4 A5 A6 A7 A8 A9' [CRl -4] . 
h) The ME simulator sends a READ BINARY command using a length of 10 bytes to the SIM. 

The status condition returned by the SIM shall be SW1 = '67', SW2='09' or '00' - incorrect parameter P3. 
i) The ME simulator sends a READ BINARY command using an offset of '00 OA' and length 1 byte to the SIM. 

The status condition returned by the SIM shall be SWl = '6B ', SW2 = 'XX' - incorrect parameter PI or P2. 
j) The ME simulator sends a READ BINARY command using an offset of '00 05' and length 5 bytes to the SIM. 

An error status condition shall be returned by the SIM. 

6.5.4 UPDATE BINARY function 

6.5.4.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [ 1 ] to support all functions described therein. 

6.5.4.2 Conformance requirement 

1) The UPDATE BINARY function shall update the current transparent EF with a string of bytes. 

2) The function shall accept as an input, the relative address (offset), the length (in bytes) of the string, and the 
string of bytes. 

3) The function shall only be performed if the UPDATE access condition for the current EF is satisfied. 
Reference: GSM 11.11 [1], subclause 8.4. 

Test Group Reference (TGR): TGR_SIM_FN. 

Test Procedure Reference (TPR): TPR_SIM_FN_UPBIN. 

6.5.4.3 Test purpose 

To verify that the UPDATE BINARY function conforms to the above requirements. 

6.5.4.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 

2) EFkc contains the data string: 'FF FF FF FF FF FF FF FF FF'. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends SELECT commands to the SIM to select EFkc under DFgsm- 

c) The ME simulator sends an UPDATE BINARY command using a length of 9 bytes, and data string 'Al A2 A3 
A4 A5 A6 A7 A8 A9' to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2= '04 ' - access condition not fulfilled [CR3]. 

d) The ME simulator sends a VERIFY CHV command to the SIM. 

e) The ME simulator sends a READ BINARY command using a length of 9 bytes to the SIM. 
The data string returned shall be 'FF FF FF FF FF FF FF FF FF'. 
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f) The ME simulator sends an UPDATE BINARY command using a length of 9 bytes, and data string 'Al A2 A3 
A4 A5 A6 A7 A8 A9' to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' [CR3]. 

g) The ME simulator sends a READ BINARY command using a length of 9 bytes to the SIM. 

The data string returned shall be 'Al A2 A3 A4 A5 A6 A7 A8 A9' [CRl]. 

h) The ME simulator sends an UPDATE BINARY command using a length of 1 byte, and data string 'E4' to the 
SIM. 

i) The ME simulator sends a READ BINARY command using a length of 9 bytes to the SIM. 

The data string returned shall be 'E4 A2 A3 A3 A4 A5 A6 A7 A8 A9' [CRl]. 

j) The ME simulator sends an UPDATE BINARY command using an offset of '00 01', a length 1 byte, and data 
string 'E5' to the SIM. 

k) The ME simulator sends a READ BINARY command using a length of 9 bytes to the SIM. 

The data string returned shall be 'E4 E5 A3 A3 A4 A5 A6 A7 A8 A9' [CRl]. 

6.5.5 READ RECORD function 

6.5.5.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [1] to support all functions described therein. 

6.5.5.2 Conformance requirement 

CRl: The READ RECORD function shall read one complete record in the current linear fixed or cyclic EF. 

CR2: The function shall accept as an input, the mode, record number if absolute mode, and the length of the 
record. 

CR3: The function shall output the record specified by the mode. 

CR4: The function shall only be performed if the READ access condition for the current EF is satisfied. 

CR5: If the mode is CURRENT, the current record is read. 

CR6: If the mode is CURRENT, the record pointer is not affected. 

CR7: If the mode is ABSOLUTE, the record given by the record number is read. 

CR8: If the mode is ABSOLUTE, the record pointer is not affected. 

CR9: If the mode is NEXT, the record pointer is incremented before the function is performed and the pointed 
record is read. 

CRIO: If the mode is NEXT, and the record pointer has not been previously been set within the selected EF, the 
first record shall be read and the record pointer set to this record. 

CRl 1: If the mode is NEXT, and the record pointer addresses the last record in a linear fixed EF, the record 
pointer shall not change and no data shall be read. 

CRl 2: If the mode is NEXT, and the record pointer addresses the last record in a cyclic EF, the first record shall 
be read and the record pointer set to this record. 

CR13: If the mode is PREVIOUS, the record pointer is decremented before the function is performed and the 
pointed record is read. 

CRl 4: If the mode is PREVIOUS, and the record pointer has not been previously been set within the selected 
EF, the last record shall be read and the record pointer set to this record. 
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CR15: If the mode is PREVIOUS, and the record pointer addresses the first record in a linear fixed EF, the 
record pointer shall not change and no data shall be read. 

CR16: If the mode is PREVIOUS, and the record pointer addresses the first record in a cyclic EF, the last record 
shall be read and the record pointer set to this record. 

CR17: The record pointer shall not be changed if the function is unsuccessful. 

CR18: For modes NEXT and PREVIOUS, PI has no significance and shall not be interpreted by the SIM. 
Reference: GSM 11.11 [1], subclause 8.5. 
Test Group Reference (TGR): TGR_SIM_FN. 
Test Procedure Reference (TPR): TPR_SIM_FN_RDREC. 

6.5.5.3 Test purpose 

To verify that the READ RECORD function conforms to the above requirements using two test procedures. 
NOTE: CR12 and CR16 can only be tested if EFacm is present. 

6.5.5.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 

2) The records in EFadn contain the following data for the first 16 bytes: 

- First record: '10 11 12 13 14 15 16 17 18 19 lA IB IC ID IE IF'. 

- Second record: '20 21 22 23 24 25 26 27 28 29 2A 2B 2C 2D 2E 2F'. 

- Second last record: 'EO El E2 E3 E4 E5 E6 E7 E8 E9 EA EB EC ED EE EF. 

- Last record: 'FO Fl F2 F3 F4 F5 F6 F7 F8 F9 FA FB FC FD FE FF'. 

The data for the remainder of these two records and for all other records (if any) is 'FF'. 

3) The records in EFacm contain the following data: 

Record 1: '01 01 01' (last updated record). 

- Record 2: '02 02 02'. 

- Record 3: '03 03 03'. 

. . . and so on for all records . . . 

- Record X: 'OX OX OX' (first updated record). 
Test procedure 1 and Requirements 

a) The ME simulator resets the SIM. 

b) The ME simulator sends SELECT commands to the SIM to select EFadn under DFtelecom- 

c) The ME simulator sends a READ RECORD command using ABSOLUTE mode with record 1 to the SIM. 
The status condition returned by the SIM shall be SWl = '98 ', SW2= '04 ' - access condition not fulfilled [CR4]. 

d) The ME simulator sends a VERIFY CHV command to the SIM. 

e) The ME simulator sends a READ RECORD command using ABSOLUTE mode with record 1 to the SIM. 
The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR4]. 
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The record data returned shall be that of the first record in EF^i^om [CRl-4,7]. 

f) The ME simulator sends SELECT commands to the SIM to select EFadn under DFtelecom- 

g) The ME simulator sends a READ RECORD command using NEXT mode to the SIM. 

h) The ME simulator sends a READ RECORD command using ABSOLUTE mode with record 2 to the SIM. 

The record data returned shall be that of the second record in EF^i^om [CR7]. 
i) The ME simulator sends a READ RECORD command using CURRENT mode to the SIM. 

The record data returned shall be that of the first record in EFadn [CR5,8]. 
j) The ME simulator sends a READ RECORD command using NEXT mode to the SIM. 

The record data returned shall be that of the second record in EFadn [CR6]. 
k) The ME simulator sends a READ RECORD command using ABSOLUTE mode with the last record to the SIM. 

The record data returned shall be that of the last record in EF^dn [CR7]. 

1) The ME simulator sends a READ RECORD command using ABSOLUTE mode with the last record + 1 to the 
SIM. 

The status condition returned by the SIM shall be SWl = '94 ', SW2 ='02' - out of range. 
m) The ME simulator sends a READ RECORD command using CURRENT mode to the SIM. 

The record data returned shall be that of the second record in EF^dn [CR17]. 
n) The ME simulator sends SELECT commands to the SIM to select EFacm under DFgsm- 
o) The ME simulator sends a READ RECORD command using CURRENT mode to the SIM. 

The record data returned shall be that of the first record in EF^cm [CR1,5]. 
p) The ME simulator sends a READ RECORD command using ABSOLUTE mode with record 3 to the SIM. 

The record data returned shall be that of the record 3 in EF^cm [CR1,7]. 

q) The ME simulator sends a READ RECORD command using ABSOLUTE mode with the last record + 1 to the 
SIM. 

The status condition returned by the SIM shall be SWl = '94 ', SW2 ='02' - out of range. 

r) The ME simulator sends a READ RECORD command using CURRENT mode to the SIM. 

The record data returned shall be that of the first record in EFacm [CR17]. 

Test procedure 2 and Requirements 

a) The ME simulator resets the SIM. 

b) The ME simulator sends a VERIFY CHV command to the SIM. 

c) The ME simulator sends SELECT commands to the SIM to select EFadn under DFtelecom- 

d) The ME simulator sends a READ RECORD command using NEXT mode to the SIM. 
The record data returned shall be that of the first record in EFadn [CRIO]. 

e) The ME simulator sends a READ RECORD command using CURRENT mode to the SIM. 
The record data returned shall be that of the first record in EFadn [CRIO]. 

f) The ME simulator sends a READ RECORD command using NEXT mode to the SIM with PI = 'FF'. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR18]. 
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The record data returned shall be that of the second record in EF^o^ [CR9]. 
g) The ME simulator sends a READ RECORD command using CURRENT mode to the SIM. 

The record data returned shall be that of the second record in EF^dj^ [CR9]. 
h) The ME simulator sends a SELECT command to the SIM to select EFadn- 
i) The ME simulator sends a READ RECORD command using PREVIOUS mode to the SIM. 

The record data returned shall be that of the last record in EFadn [CR14]. 
j) The ME simulator sends a READ RECORD command using NEXT mode to the SIM. 

The status condition returned by the SIM shall be SW1 = '94', SW2='02' - out of range [CRll]. 
k) The ME simulator sends a READ RECORD command using CURRENT mode to the SIM. 

The record data returned shall be that of the last record in EF^dn [CRll]. 
1) The ME simulator sends a READ RECORD command using PREVIOUS mode with PI = 'FF' to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR18]. 

The record data returned shall be that of the second last record in EFj^Df^ [CR13]. 
m) The ME simulator sends a SELECT command to the SIM to select EFadn- 
n) The ME simulator sends a READ RECORD command using NEXT mode to the SIM. 
o) The ME simulator sends a READ RECORD command using PREVIOUS mode to the SIM. 

The status condition returned by the SIM shall be SWl = '94', SW2='02' - out of range [CR15]. 
p) The ME simulator sends a READ RECORD command using CURRENT mode to the SIM. 

The record data returned shall be that of the first record in EFadn [CR15]. 
q) The ME simulator sends SELECT commands to the SIM to select EFacm- 
r) The ME simulator sends a READ RECORD command using PREVIOUS mode to the SIM. 

The record data returned shall be that of the last record (record X) in EF^cm [CR16]. 
s) The ME simulator sends a READ RECORD command using CURRENT mode to the SIM. 

The record data returned shall be that of the last record (record X) in EFacm [CR16]. 
t) The ME simulator sends a READ RECORD command using NEXT mode to the SIM. 

The record data returned shall be that of the first record (record 1) in EFacm [CR12]. 
u) The ME simulator sends a READ RECORD command using CURRENT mode to the SIM. 

The record data returned shall be that of the first record (record 1) in EFacm [CR12]. 

6.5.6 UPDATE RECORD function 

6.5.6.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM ILl 1 [1] to support all functions described therein. 

6.5.6.2 Conformance requirement 

CRl: The UPDATE RECORD function shall update one complete record in the current linear fixed or cyclic EF. 
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CR2: The function shall accept as an input, the mode, record number if absolute mode, the length of the record, 
and the data used for updating the record. 

CR3: The function shall only be performed if the UPDATE access condition for the current EF is satisfied. 

CR4: For cyclic files, only PREVIOUS mode is allowed. 

CR5: If the mode is CURRENT, the current record is updated 

CR6: If the mode is CURRENT, the record pointer is not affected. 

CR7: If the mode is ABSOLUTE, the record given by the record number is updated. 

CR8: If the mode is ABSOLUTE, the record pointer is not affected. 

CR9: If the mode is NEXT, the record pointer is incremented before the function is performed and the pointed 
record is updated. 

CRIO: If the mode is NEXT, and the record pointer has not previously been set within the selected EF, the first 
record shall be updated and the record pointer set to this record. 

CRl 1: If the mode is NEXT, and the record pointer addresses the last record, the record pointer shall not change 
and no record shall be updated. 

CR12: If the mode is PREVIOUS, the record pointer is decremented before the function is performed and the 
pointed record is updated. 

CR13: If the mode is PREVIOUS, and the record pointer has not previously been set within the selected EF, the 
last record shall be updated and the record pointer set to this record. 

CR14: If the mode is PREVIOUS, and the record pointer addresses the first record, the record pointer shall not 
change and no record shall be updated. 

CR15: If the mode is PREVIOUS and the EF is a cyclic file, the oldest record is updated, the record pointer set 
to this record, and this record shall become the first record. 

CRl 6: The record pointer shall not be changed if the function is unsuccessful. 

CR17: For modes NEXT and PREVIOUS, PI has no significance and shall not be interpreted by the SIM. 
Reference: GSM 11.11 [1], subclause 8.6. 
Test Group Reference (TGR): TGR_SIM_FN. 
Test Procedure Reference (TPR): TPR_SIM_FN_UPREC. 

6.5.6.3 Test purpose 

To verify that the UPDATE RECORD function conforms to the above requirements for the different modes available. 
NOTE: CR4 and CRl 3 can only be tested if EFacm is present. 

6.5.6.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 

2) The records in EFadn contain the following data for the first 16 bytes: 

- First record: '10 11 12 13 14 15 16 17 18 19 lA IB IC ID IE IF. 

- Second record: '20 21 22 23 24 25 26 27 28 29 2A 2B 2C 2D 2E 2F. 

- Second last record: 'EO El E2 E3 E4 E5 E6 E7 E8 E9 EA EB EC ED EE EF. 
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- Last record: 'FO Fl F2 F3 F4 F5 F6 F7 F8 F9 FA FB FC FD FE FF'. 

The data for the remainder of these two records and for all other records (if any) is 'FF'. 
3) The records in EFacm contain the following data: 
Record 1: '01 01 01' (last updated record). 

- Record 2: '02 02 02'. 

- Record 3: '03 03 03'. 

. . . and so on for all records . . . 

- Record X: 'OX OX OX' (first updated record). 
Test procedure 1 and Requirements 

a) The ME simulator resets the SIM. 

b) The ME simulator sends SELECT commands to the SIM to select EFadn under DFtelecom- 

c) The ME simulator sends an UPDATE RECORD command using ABSOLUTE mode with record 1 to the SIM. 
The data used is 'CI' for all bytes. 

The status condition returned by the SIM shall be SWl = '98 ', SW2= '04 ' - access condition not fulfilled [CR3]. 

d) The ME simulator sends a VERIFY CHV command to the SIM. 

e) The ME simulator sends an UPDATE RECORD command using ABSOLUTE mode with record 1 to the SIM. 
The data used is 'C2' for all bytes. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR3]. 

f) The ME simulator sends a READ RECORD command using ABSOLUTE mode with record 1 to the SIM. 
The record data returned shall be 'C2' for all bytes [CRl-3,7]. 

g) The ME simulator sends SELECT commands to the SIM to select EFadn under DFtelecom- 

h) The ME simulator sends an UPDATE RECORD command using NEXT mode to the SIM. The data used is 'DO' 
for all bytes. 

i) The ME simulator sends an UPDATE RECORD command using ABSOLUTE mode with record 2 to the SIM. 
The data used is 'C3' for all bytes. 

j) The ME simulator sends a READ RECORD command using ABSOLUTE mode with record 2 to the SIM. 

The record data returned shall be 'C3' for all bytes[CR7]. 

k) The ME simulator sends an UPDATE RECORD command using CURRENT mode to the SIM. The data used is 
'C4' for all bytes. 

1) The ME simulator sends a READ RECORD command using ABSOLUTE mode with record 1 to the SIM. 

The record data returned shall be 'C4' for all bytes [CR5,8]. 

m) The ME simulator sends an UPDATE RECORD command using NEXT mode to the SIM. The data used is 'C5' 
for all bytes. 

n) The ME simulator sends a READ RECORD command using ABSOLUTE mode with record 2 to the SIM. 

The record data returned shall be 'C5' for all bytes [CR8]. 

o) The ME simulator sends an UPDATE RECORD command using ABSOLUTE mode with the last record to the 
SIM. The data used is 'C7' for all bytes. 

p) The ME simulator sends a READ RECORD command using ABSOLUTE mode with the last record to the SIM. 
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The record data returned shall be 'C7' for all bytes [CR7]. 

q) The ME simulator sends an UPDATE RECORD command using ABSOLUTE mode with the last record + 1 to 
the SIM. The data used is 'C8' for all bytes. 

The status condition returned by the SIM shall be SWl = '94 ', SW2 ='02' - out of range. 

r) The ME simulator sends an UPDATE RECORD command using CURRENT mode to the SIM. The data used is 
'C9' for all bytes. 

s) The ME simulator sends a READ RECORD command using ABSOLUTE mode with record 2 to the SIM. 

The record data returned shall be 'C9' for all bytes [CR16]. 

t) The ME simulator sends SELECT commands to the SIM to select EFacm under DFqsm- 

u) The ME simulator sends an UPDATE RECORD command using CURRENT mode to the SIM. The data used is 
'CA' for all bytes. 

The status condition returned by the SIM shall be SW1 = '6B', SW2='XX' -file is inconsistent with the command 
[CR4]. 

v) The ME simulator sends an UPDATE RECORD command using ABSOLUTE mode with record 3 to the SIM. 
The data used is 'CB' for all bytes. 

The status condition returned by the SIM shall be SW1 = '6B', SW2='XX' -file is inconsistent with the command 
[CR4]. 

Test procedure 2 and Requirements 

a) The ME simulator resets the SIM. 

b) The ME simulator sends a VERIFY CHV command to the SIM. 

c) The ME simulator sends SELECT commands to the SIM to select EFadn under DFtelecom- 

d) The ME simulator sends an UPDATE RECORD command using NEXT mode to the SIM. The data used is 'C2' 
for all bytes. 

e) The ME simulator sends a READ RECORD command using ABSOLUTE mode with record 1 to the SIM. 
The record data returned shall be 'C2' for all bytes [CRIO]. 

f) The ME simulator sends an UPDATE RECORD command using CURRENT mode to the SIM. The data used is 
'C3' for all bytes. 

g) The ME simulator sends a READ RECORD command using ABSOLUTE mode with record 1 to the SIM. 

The record data returned shall be 'C3' for all bytes [CRIO]. 

h) The ME simulator sends an UPDATE RECORD command using NEXT mode to the SIM with PI = 'FF'. The 
data used is 'C4' for all bytes. 

The status condition returned by the SIM shall be SWl = '90 ', SW2 ='00' - normal ending of command [CRl 7]. 

i) The ME simulator sends a READ RECORD command using ABSOLUTE mode with record 2 to the SIM. 

The record data returned shall be 'C4' for all bytes [CR9,17]. 

j) The ME simulator sends an UPDATE RECORD command using CURRENT mode to the SIM. The data used is 
'C5' for all bytes. 

k) The ME simulator sends a READ RECORD command using ABSOLUTE mode with record 2 to the SIM. 

The record data returned shall be 'CS'for all bytes [CR9]. 

1) The ME simulator sends a SELECT command to the SIM to select EFadn- 
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m) The ME simulator sends an UPDATE RECORD command using PREVIOUS mode to the SIM. The data used is 
'C6' for all bytes. 

n) The ME simulator sends a READ RECORD command using ABSOLUTE mode with the last record to the SIM. 

The record data returned shall be 'C6' for all bytes [CR13]. 

o) The ME simulator sends an UPDATE RECORD command using NEXT mode to the SIM. The data used is 'C7' 
for all bytes. 

The status condition returned by the SIM shall be SW1 = '94', SW2='02' - out of range [CRll]. 

p) The ME simulator sends an UPDATE RECORD command using CURRENT mode to the SIM. The data used is 
'C8' for all bytes. 

q) The ME simulator sends a READ RECORD command using ABSOLUTE mode with the last record to the SIM. 

The record data returned shall be 'CS'for all bytes [CR16]. 

r) The ME simulator sends an UPDATE RECORD command using PREVIOUS mode with PI = 'FF' to the SIM. 
The data used is 'C9' for all bytes. 

The status condition returned by the SIM shall be SWl = '90 ', SW2 ='00' - normal ending of command [CRl 7]. 

s) The ME simulator sends a READ RECORD command using ABSOLUTE mode with the second last record to 
the SIM. 

The record data returned shall be 'C9' for all bytes [CR12,17]. 

t) The ME simulator sends a SELECT command to the SIM to select EFadn- 

u) The ME simulator sends an UPDATE RECORD command using NEXT mode to the SIM. The data used is 'CA' 
for all bytes. 

v) The ME simulator sends an UPDATE RECORD command using PREVIOUS mode to the SIM. The data used is 
'CB' for all bytes. 

The status condition returned by the SIM shall be SWl = '94', SW2='02' - out of range [CRl 3]. 

w) The ME simulator sends an UPDATE RECORD command using CURRENT mode to the SIM. The data used is 
'CC for all bytes. 

x) The ME simulator sends a READ RECORD command using ABSOLUTE mode with record 1 to the SIM. 

The record data returned shall be 'CC for all bytes [CR16]. 

y) The ME simulator sends SELECT commands to the SIM to select EFacm under DFgsm- 

z) The ME simulator sends an UPDATE RECORD command using PREVIOUS mode to the SIM. The data used is 
'CD' for all bytes. 

aa) The ME simulator sends a READ RECORD command using ABSOLUTE mode with the first record (record 1) 
to the SIM. 

The record data returned shall be 'CD' for all bytes [CRl 5]. 

ab) The ME simulator sends an UPDATE RECORD command using NEXT mode to the SIM. The data used is 'C2' 
for all bytes. 

The status condition returned by the SIM shall be SWl = '6B ', SW2='XX' -file is inconsistent with the command 
[CR4]. 
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6.5.7 SEEK function 

6.5.7.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [1] to support all functions described therein. 

6.5.7.2 Conformance requirement 

CRl: The SEEK function shall search through the current linear fixed EF to find a record starting with the given 
pattern. 

CR2: The function shall accept as an input, the type and mode, pattern and length of pattern. 

CR3: The SEEK function shall support both type 1 and type 2. 

CR4: For a type 2 SEEK, the function shall output the record number. 

CR5: The SEEK function shall support the following modes: 

a) from the beginning forwards; 

b) from the end backwards; 

c) from the next location forwards; 

d) from the previous location backwards. 

CR6: The function shall only be performed if the READ access condition for the current EF is satisfied. 

CR7: If the parameter P3 indicates a pattern-length greater than the record length, the SIM shall send the status 
information 'incorrect parameter P3'. 

CR8: The SIM shall be able to accept any pattern length from 1 to 16 bytes inclusive. 

CR9: For a SEEK function of next location forwards, if the record pointer has not been previously set within the 
selected linear fixed EF, the search begins with the first record. 

CRIO: For a SEEK function of previous location backwards, if the record pointer has not been previously set 
within the selected linear fixed EF, the search begins with the last record. 

CRll: After a successful SEEK function, the record pointer shall be set to the record in which the pattern was 
found. 

CRl 2: The record pointer shall not be changed by an unsuccessful SEEK function. 

Reference: GSM 11.11 [1], subclause 8.7. 

Test Group Reference (TGR): TGR_SIM_FN. 

Test Procedure Reference (TPR): TPR_SIM_FN_SEEK. 

6.5.7.3 Test purpose 

To verify that the SEEK function conforms to the above requirements for the different modes available. 

6.5.7.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 

2) The records in EFadn contain the following data for the first 16 bytes: 
- record 1: 'AO Al A2 11 12 13 14 15 16 17 18 19 lA IB IC ID'. 
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- record 2: 'AO Al A2 21 22 23 24 25 26 27 28 29 2A 2B 2C 2D'. 

The data for the remainder of these two records and for all other records is 'FF'. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends SELECT commands to the SIM to select EFadn under DFtelecom- 

c) The ME simulator sends a type 1 SEEK command using the Trom the beginning forwards' mode, a pattern- 
length of 1, and pattern 'AO' to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2= '04 ' - access condition not fulfilled [CR6]. 

d) The ME simulator sends a VERIFY CHV command to the SIM. 

e) The ME simulator sends a type 1 SEEK command using the 'from the beginning forwards' mode, a pattern- 
length of 1, and pattern 'AO' to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CRl-3,6]. 

f) The ME simulator sends SELECT commands to the SIM to select EF^dn under DFtelecom- 

g) The ME simulator sends a type 2 SEEK command using the 'from the beginning forwards' mode, a pattern- 
length of 1, and pattern 'AO' to the SIM. 

The status condition returned by the SIM shall be SWl = '9F', SW2='01 ' [CRl-3,8]. 

h) The ME simulator sends a GET RESPONSE command to the SIM. 

The response data shall be '01 ' indicating that the first record has been found [CR4]. 

i) The ME simulator sends a type 2 SEEK command using the 'from the beginning forwards' mode, a pattern- 
length of 3, and pattern 'AO Al A2' to the SIM. 

j) The ME simulator sends a GET RESPONSE command to the SIM. 

The response data shall be '01 ' indicating that the first record has been found [CR5a]. 

k) The ME simulator sends a type 2 SEEK command using the 'from the end backwards' mode, a pattern-length of 
3, and pattern 'AO Al A2' to the SIM. 

1) The ME simulator sends a GET RESPONSE command to the SIM. 

The response data shall be '02' indicating that the second record has been found [CR5b]. 

m) The ME simulator sends a type 2 SEEK command using the 'from the previous location backwards' mode, a 
pattern-length of 16, and the following pattern to the SIM: 

'AO Al A2 11 12 13 14 15 16 17 18 19 lA IB IC ID' 

The status condition returned by the SIM shall be SWl = '9F', SW2='01 ' [CR8]. 

n) The ME simulator sends a GET RESPONSE command to the SIM. 

The response data shall be '01 ' indicating that the first record has been found [CR5d]. 

o) The ME simulator sends a type 2 SEEK command using the 'from the next location forwards' mode, a pattern- 
length of 3, and pattern 'AO Al A2' to the SIM. 

p) The ME simulator sends a GET RESPONSE command to the SIM. 

The response data shall be '02' indicating that the second record has been found [CR5c]. 

q) The ME simulator sends a SELECT command to the SIM to select EFadn again. 
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r) The ME simulator sends a type 2 SEEK command using the 'from the next location forwards' mode, a pattern- 
length of 3, and pattern 'AO Al A2' to the SIM. 

s) The ME simulator sends a GET RESPONSE command to the SIM to retrieve the single byte of response data. 

The response data shall be '01 ' indicating that the first record has been found [CR9]. 

t) The ME simulator sends a SELECT command to the SIM to select EFadn again. 

u) The ME simulator sends a type 2 SEEK command using the 'from the previous location backwards' mode, a 
pattern-length of 3, and pattern 'AO Al A2' to the SIM. 

v) The ME simulator sends a GET RESPONSE command to the SIM. 

The response data shall be '02' indicating that the second record has been found [CRIO]. 
w) The ME simulator sends a READ RECORD command using CURRENT mode to the SIM. 

The record data returned shall be that of the second record in EFadn [CRll]. 

x) The ME simulator sends a type 2 SEEK command using the 'from the beginning forwards' mode, a pattern- 
length of 5, and pattern 'Al A2 11 12 13' to the SIM. 

The status condition returned by the SIM shall be SW1='94', SW2='04' - pattern not found [CRl]. 
y) The ME simulator sends a READ RECORD command using CURRENT mode to the SIM. 

The record data returned shall be that of the second record in EFj^d^i [CRl 2]. 

z) The ME simulator sends SELECT commands to the SIM to select EFadn under DFtelecom- 

aa) The ME simulator sends a type 2 SEEK command using the 'from the beginning forwards' mode, a pattern- 
length of one more than the record size of EFadn, and 'FF' for all pattern bytes to the SIM. 

The status condition returned by the SIM shall be SW1 = '67', SW2='XX' - incorrect parameter P3 [CR7]. 

6.5.8 INCREASE function 

6.5.8.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [1] and containing EFacm and EFacmmax to support all 
functions described therein. 

6.5.8.2 Conformance requirement 

CRl : This function shall add the value given to the value of the last increased/updated record of the current 
cyclic EF and store the result into the oldest record. 

CR2: The record pointer shall be set to this record and this record becomes the first record. 

CR3: The function shall only be used if the INCREASE access condition is fulfilled. 

CR4: The function shall accept as an input, the value to be added. 

CR5: The function shall output the value of the increased record and the value which has been added. 

CR6: The SIM shall not perform the INCREASE if the result would exceed the maximum value of the record 
(represented by all bytes set to 'FF). 

Reference: GSM 11.11 [1], subclause 8.8. 

Test Group Reference (TGR): TGR_SIM_FN. 

Test Procedure Reference (TPR): TPR_SIM_FN_INC. 
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6.5.8.3 Test purpose 

To verify that the INCREASE function conforms to the above requirements. 

6.5.8.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 

2) Each record in EFacm contains the data '00 00 01'. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends SELECT commands to the SIM to select EFacm under DFqsm- 

c) The ME simulator sends an INCREASE command with value '00 00 02' to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2 ='04' - access condition not fulfilled [CR3]. 

d) The ME simulator sends a VERIFY CHV command to the SIM. 

e) The ME simulator sends an INCREASE command with value '00 00 03' to the SIM. 
The status condition returned by the SIM shall be SW1 = '9F', SW2='06' [CR4]. 

f) The ME simulator sends a GET RESPONSE command to the SIM. 
The response data shall be '00 00 04 00 00 03' [CR1,5]. 

g) The ME simulator sends an INCREASE command with value '01 02 00' to the SIM. 
h) The ME simulator sends a GET RESPONSE command to the SIM. 

The response data shall be '01 02 04 01 02 00' [CRl]. 
i) The ME simulator sends a READ RECORD command using ABSOLUTE mode with record 1 to the SIM. 

The data read shall be '01 02 04' [CR2]. 

j) The ME simulator sends an INCREASE command with value ' FF 00 00' to the SIM. 

The status condition returned by the SIM shall be SWl = '98', SW2='50' - increase cannot be performed - Max 
value reached [CR6]. 

k) The ME simulator sends an INCREASE command with value '00 FF FD' to the SIM. 

1) The ME simulator sends a GET RESPONSE command to the SIM. 

The response data shall be '02 02 01 00 FF FD' [CR5]. 

6.5.9 VERIFY CHV function 

6.5.9.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [1] to support all functions described therein. 

6.5.9.2 Conformance requirement 

CRl: This function shall verify the CHV presented by comparing it with the one stored in the SIM. 
CR2: The function shall accept as input, an indication of CHV1/CHV2 and the CHV. 
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CR3: The verification process shall be subject to the following conditions being fulfilled: 

a) CHV is not disabled; 

b) CHV is not blocked. 

CR4: If the access condition for a function to be performed on a file is CHVl or CHV2, then a successful 
verification of the relevant CHV shall be required prior to the use of the function on this file unless the CHV is 
disabled. 

CR5: If the CHV presented is correct, the number of remaining CHV attempts for that CHV shall be reset to its 
initial value 3. 

CR6: If the CHV presented is false, the number of remaining CHV attempts for that CHV shall be decremented. 

CR7: After 3 consecutive false CHV attempts, not necessarily in the same card session, the respective CHV shall 
be blocked and the access condition never fulfilled until the UNBLOCK CHV function has been successfully 
performed on the respective CHV. 

Reference: GSM 11.11 [1], subclause 8.9. 

Test Group Reference (TGR): TGR_SIM_FN. 

Test Procedure Reference (TPR): TPR_SIM_FN_VERCHV. 

6.5.9.3 Test purpose 

To verify that the VERIFY CHV function conforms to the above requirements. 

NOTE: This function is only tested for CHVl. It is assumed that if the function operates correctly for CHVl, it 
will also operate correctly for CHV2 or other CHV. 

6.5.9.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 

2) CHVl on the SIM is set to '00000000'. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends SELECT commands to the SIM to select EFkc under DFgsm- 

c) The ME simulator sends a READ BINARY command using a length of 2 bytes to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2 ='04' - access condition not fulfilled [CR4]. 

d) The ME simulator sends a VERIFY CHV command to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2= '00' - normal ending of command [CR1,2]. 

e) The ME simulator sends a READ BINARY command using a length of 2 bytes to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR4]. 

f) The ME simulator sends a VERIFY CHV command with incorrect CHVl to the SIM. 

The status condition returned by the SIM shall be SWl = '98', SW2= '04' -unsuccessful CHV verification, at least 
one attempt left. 

g) The ME simulator sends a STATUS command to the SIM. 
The following shall be true of the response data [CR6]: 
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Bits 1 through 4 of byte 19 shall indicate two VERIFY CHVl attempts remaining. 
h) The ME simulator sends a VERIFY CHV command to the SIM. 
i) The ME simulator sends a STATUS command to the SIM. 
The following shall be true of the response data [CR5]: 

Bits 1 through 4 of byte 19 shall indicate three VERIFY CHVl attempts remaining. 

j) The ME simulator sends a VERIFY CHV command with incorrect CHVl to the SIM. 

The status condition returned by the SIM shall be SW1 = '98', SW2='04' -unsuccessful CHV verification, at least 
one attempt left. 

k) The ME simulator sends a VERIFY CHV command with incorrect CHVl to the SIM. 

The status condition returned by the SIM shall be SW1 = '98', SW2='04' -unsuccessful CHV verification, at least 
one attempt left. 

1) The ME simulator resets the SIM. 

m) The ME simulator sends a VERIFY CHV command with incorrect CHVl to the SIM. 

The status condition returned by the SIM shall be SW1 = '98', SW2=40' - unsuccessful CHV verification, no 
attempt left[CR7]. 

n) The ME simulator resets the SIM. 

o) The ME simulator sends a VERIFY CHV command to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2 =40' - CHV blocked [CR3b, 7]. 
p) The ME simulator sends SELECT commands to the SIM to select EFkc under DFgsm- 
q) The ME simulator sends a READ BINARY command using a length of 2 bytes to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2 ='04' - CHV blocked [CR7]. 
r) The ME simulator sends an UNBLOCK CHV command to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2= '00' - normal ending of command [CR7]. 
s) The ME simulator sends a DISABLE CHV command to the SIM. 
t) The ME simulator resets the SIM. 

u) The ME simulator sends SELECT commands to the SIM to select EFkc under DFqsm- 
v) The ME simulator sends a READ BINARY command using a length of 2 bytes to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR4]. 

w) The ME simulator sends a VERIFY CHV command to the SIM. 

The status condition returned by the SIM shall be SWl = '98', SW2= '08' - in contradiction with CHV status 
[CR3]. 

6.5.10 CHANGE CHV function 
6.5.10.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [1] to support all functions described therein. 
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6.5.10.2 Conformance requirement 

CRl: This function shall assign a new value to the relevant CHV, subject to the following conditions being 
fulfilled: 

a) CHV is not disabled; 

b) CHV is not blocked. 

CR2: The function shall accept as input, an indication of CHV1/CHV2 and the old and new CHV. 

CR3: If the old CHV presented is correct, the number of remaining CHV attempts for that CHV shall be reset to 
its initial value 3 and the new value for the CHV shall become valid. 

CR4: If the old CHV presented is false, the number of remaining CHV attempts for that CHV shall be 
decremented and the value of the CHV shall remain unchanged. 

CR5: After 3 consecutive false CHV presentations, not necessarily in the same card session, the respective CHV 
shall be blocked and the access condition never fulfilled until the UNBLOCK CHV function has been 
successfully performed on the respective CHV. 

Reference: GSM 11.11 [1], subclause 8.10. 

Test Group Reference (TGR): TGR_SIM_FN. 

Test Procedure Reference (TPR): TPR_SIM_FN_CHCHV. 

6.5.10.3 Test purpose 

To verify that the CHANGE CHV function conforms to the above requirements. 

NOTE: This function is only tested for CHVl. It is assumed that if the function operates correctly for CHVl, it 
will also operate correctly for CHV2 or other CHV. 

6.5.10.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 

2) CHVl on the SIM is set to '00000000'. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends a CHANGE CHV command with an incorrect old CHVl of'llllllU' and new 
CHVl of '33333333' to the SIM. 

The status condition returned by the SIM shall be SW1 = '98', SW2= '04' - unsuccessful CHV verification, at least 
one attempt left. 

c) The ME simulator sends a STATUS command to the SIM. 
The following shall be true of the response data [CR4]: 

Bits 1 through 4 of byte 19 shall indicate two VERIFY CHVl attempts remaining. 

d) The ME simulator sends a CHANGE CHV command with an old CHVl of '00000000' and new CHVl of 

'33333333' to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2= '00' - normal ending of command [CR2]. 

e) The ME simulator sends a STATUS command to the SIM. 
The following shall be true of the response data [CR3]: 
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Bits 1 through 4 of byte 19 shall indicate three VERIFY CHVl attempts remaining. 

f) The ME simulator sends a CHANGE CHV command with an incorrect old CHVl of '00000000' and new 
CHVl of 55555555' to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2 ='04' - unsuccessful CHV verification, at least 
one attempt left. 

g) The ME simulator sends a CHANGE CHV command with an incorrect old CHVl of '55555555' and new 
CHVl of '33333333' to the SIM. 

The status condition returned by the SIM shall be SWl = '98', SW2= '04' - unsuccessful CHV verification, at least 
one attempt left. 

h) The ME simulator resets the SIM. 

i) The ME simulator sends a CHANGE CHV command with an incorrect old CHVl of '00000000' and new 
CHVl of '55555555' to the SIM. 

The status condition returned by the SIM shall be SW1 = '98', SW2='40' - unsuccessful CHV verification, no 
attempt left [CR5]. 

j) The ME simulator resets the SIM. 

k) The ME simulator sends a CHANGE CHV command with an old CHVl of '33333333' and new CHVl of 

'55555555' to the SIM. 

The status condition returned by the SIM shall be SW1 = '98', SW2='40' - CHV blocked [CRlb, 5]. 
1) The ME simulator sends an UNBLOCK CHV command with new CHVl of '55555555' to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR5]. 
m) The ME simulator sends a DISABLE CHV command to the SIM. 
n) The ME simulator resets the SIM. 

o) The ME simulator sends a CHANGE CHV command with an old CHVl '55555555' and new CHVl of 

'77777777' to the SIM. 

The status condition returned by the SIM shall be SWl = '98', SW2='08' - in contradiction with CHV status 
[CRla]. 

p) The ME simulator sends an ENABLE CHV command to the SIM with CHVl '55555555'. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CRla]. 

6.5.1 1 DISABLE CHV function 

6.5.1 1 .1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [1] to support all functions described therein. 

6.5.1 1 .2 Conformance requirement 

CRl: The successful execution of this function shall have the effect that files protected by CHVl are now 
accessible as if they were marked 'ALWAYS'. 

CR2: The function shall accept as input, CHVl. 

CR3: This function shall not be executed by the SIM when CHVl is already disabled or blocked. 

CR4: If the CHVl presented is correct, the number of remaining CHVl attempts shall be reset to its initial 
value 3 and CHVl shall be disabled. 
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CR5: If the CHVl presented is false, the number of remaining CHVl attempts shall be decremented and CHVl 
shall remain enabled. 

CR6: After 3 consecutive false CHVl presentations, not necessarily in the same card session, CHVl shall be 
blocked and the access condition never fulfilled until the UNBLOCK CHV function has been successfully 
performed on CHVl. 

Reference: GSM 11.11 [1], subclause 8.11. 

Test Group Reference (TGR): TGR_SIM_FN. 

Test Procedure Reference (TPR): TPR_SIM_FN_DISCHV. 

6.5.11.3 Test purpose 

To verify that the DISABLE CHV function conforms to the above requirements. 

6.5.11.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends SELECT commands to the SIM to select EFloci under DFgsm- 

c) The ME simulator sends a READ BINARY command using a length of 2 bytes to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2 ='04' - access condition not fulfilled. 

d) The ME simulator sends a DISABLE CHV command with incorrect CHVl to the SIM. 

The status condition returned by the SIM shall be SWl = '98', SW2= '04' - unsuccessful CHV verification, at least 
one attempt left [CR5]. 

e) The ME simulator sends a READ BINARY command using a length of 2 bytes to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2= '04 ' - access condition not fulfilled [CR5]. 

f) The ME simulator sends a STATUS command to the SIM. 
The following shall be true of the response data [CR5]: 

Bit 8 of byte 14 shall be indicating that CHVl is still enabled. 

Bits 1 through 4 of byte 19 shall indicate two VERIFY CHVl attempts remaining. 

g) The ME simulator sends a DISABLE CHV command to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR2]. 
h) The ME simulator sends a STATUS command to the SIM. 
The following shall be true of the response data [CR4]: 

Bit 8 of byte 14 shall be 1 indicating that CHVl is now disabled. 
Bits 1 through 4 of byte 19 shall indicate three VERIFY CHVl attempts remaining. 
i) The ME simulator sends an ENABLE CHV command to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command. 
j) The ME simulator sends a READ BINARY command using a length of 2 bytes to the SIM. 
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The status condition returned by the SIM shall be SW1 = '90', SW2='00' - normal ending of command [CRl]. 

k) The ME simulator sends a DISABLE CHV command with incorrect CHVl to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2 ='04' - unsuccessful CHV verification, at least 
one attempt left. 

1) The ME simulator sends a DISABLE CHV command with incorrect CHVl to the SIM. 

The status condition returned by the SIM shall be SWl = '98', SW2= '04' - unsuccessful CHV verification, at least 
one attempt left. 

m) The ME simulator resets the SIM. 

n) The ME simulator sends a DISABLE CHV command with incorrect CHVl to the SIM. 

The status condition returned by the SIM shall be SW1 = '98', SW2='40' - unsuccessful CHV verification, no 
attempt left [CR6]. 

o) The ME simulator resets the SIM. 

p) The ME simulator sends a DISABLE CHV command to the SIM. 

The status condition returned by the SIM shall be SWl = '98', SW2='40' - CHV blocked [CR3, 6]. 
q) The ME simulator sends an UNBLOCK CHV command to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR6]. 

r) The ME simulator sends a DISABLE CHV command to the SIM. 

s) The ME simulator sends a DISABLE CHV command to the SIM. 

The status condition returned by the SIM shall be SW1 = '98', SW2='08' - in contradiction with CHV status 
[CR3]. 

6.5.12 ENABLE CHV function 

6.5.12.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [1] to support all functions described therein. 

6.5.12.2 Conformance requirement 

CRl: The successful execution of this function shall have the effect that files accessible as if they were marked 
'ALWAYS' due to CHVl being disabled are now protected by CHVl. 

CR2: The function shall accept as input, CHVl. 

CR3: This function shall not be executed by the SIM when CHVl is already enabled or blocked. 

CR4: If the CHVl presented is correct, the number of remaining CHVl attempts shall be reset to its initial 
value 3 and CHVl shall be enabled. 

CR5: If the CHVl presented is false, the number of remaining CHVl attempts shall be decremented and CHVl 
shall remain disabled. 

CR6: After 3 consecutive false CHVl presentations, not necessarily in the same card session, CHVl shall be 
blocked and the access condition never fulfilled until the UNBLOCK CHV function has been successfully 
performed on CHVl. 

Reference: GSM 11.11 [1], subclause 8.12. 

Test Group Reference (TGR): TGR_SIM_FN. 
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Test Procedure Reference (TPR): TPR_SIM_FN_ENCHV. 

6.5.12.3 Test purpose 

To verify that the ENABLE CHV function conforms to the above requirements. 

6.5.12.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 

2) CHVl on the SIM is disabled. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends SELECT commands to the SIM to select EFloci under DFqsm- 

c) The ME simulator sends a READ BINARY command using a length of 2 bytes to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command. 

d) The ME simulator sends an ENABLE CHV command with incorrect CHVl to the SIM. 

The status condition returned by the SIM shall be SWl = '98', SW2= '04' - unsuccessful CHV verification, at least 
one attempt left. 

e) The ME simulator sends a READ BINARY command using a length of 2 bytes to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - access condition not fulfilled [CRl]. 

f) The ME simulator sends a STATUS command to the SIM. 
The following shall be true of the response data [CR5]: 

Bit 8 of byte 14 shall be 1 indicating that CHVl is still disabled. 

Bits 1 through 4 of byte 19 shall indicate two VERIFY CHVl attempts remaining. 

g) The ME simulator sends an ENABLE CHV command to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2= '00' - normal ending of command [CR2]. 
h) The ME simulator sends a STATUS command to the SIM. 

The following shall be true of the response data [CR4]: 

Bit 8 of byte 14 shall be indicating that CHVl is now enabled. 
Bits 1 through 4 of byte 19 shall indicate three VERIFY CHVl attempts remaining. 
i) The ME simulator resets the SIM. 

j) The ME simulator sends SELECT commands to the SIM to select EFloci under DFqsm- 
k) The ME simulator sends a READ BINARY command using a length of 2 bytes to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2 ='04' - access condition not fulfilled [CRl]. 

1) The ME simulator sends a DISABLE CHV command to the SIM. 

m) The ME simulator sends an ENABLE CHV command with incorrect CHVl to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2 ='04' - unsuccessful CHV verification, at least 
one attempt left. 
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n) The ME simulator sends an ENABLE CHV command with incorrect CHVl to the SIM. 

The status condition returned by the SIM shall be SW1 = '98', SW2= '04' - unsuccessful CHV verification, at least 
one attempt left. 

o) The ME simulator resets the SIM. 

p) The ME simulator sends an ENABLE CHV command with incorrect CHVl to the SIM. 

The status condition returned by the SIM shall be SW1 = '98', SW2='40' - unsuccessful CHV verification, no 
attempt left [CR6]. 

q) The ME simulator resets the SIM. 

r) The ME simulator sends an ENABLE CHV command to the SIM. 

The status condition returned by the SIM shall be SWl = '98', SW2='40' orSWl = '98', SW2='08' -CHV blocked 
[CR3,6]. 

s) The ME simulator sends an UNBLOCK CHV command to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR6]. 

t) The ME simulator sends ENABLE CHV command to the SIM. 

The status condition returned by the SIM shall be SWl = '98', SW2= '08' - in contradiction with CHV status 
[CR3]. 

6.5.13 UNBLOCK CHV function 

6.5.13.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [ 1 ] to support all functions described therein. 

6.5.13.2 Conformance requirement 

CRl: This function shall unblock a CHV which has been blocked by 3 consecutive wrong CHV presentations. 

- CR2: The function shall accept as input, an indication of CHV1/CHV2, the UNBLOCK CHV and the new CHV. 
CR3: This function shall be performed regardless of whether or not the relevant CHV is blocked. 

- CR4: If the UNBLOCK CHV presented is correct, the new CHV value, presented together with the UNBLOCK 
CHV is stored in the relevant EFCHV, the number of remaining UNBLOCK CHV attempts for that UNBLOCK 
CHV is reset to its initial value 10 and the number of remaining CHV attempts for that CHV is reset to its initial 
value 3. 

CR5: After a successful unblocking attempt, the CHV shall be enabled, and the relevant access condition level 
satisfied. 

- CR6: If the presented UNBLOCK CHV is false, the number of remaining UNBLOCK CHV attempts for that 
UNBLOCK CHV shall be decremented. 

CR7: After 10 consecutive false UNBLOCK CHV presentations, not necessarily in the same card session, the 
respective UNBLOCK CHV shall be blocked. 

- CR8: A false UNBLOCK CHV shall have no effect on the status of the respective CHV itself. 
Reference: GSM 11.11 [1], subclause 8.13. 

Test Group Reference (TGR): TGR_SIM_FN. 

Test Procedure Reference (TPR): TPR_SIM_FN_UNCHV. 
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6.5.13.3 Test purpose 

To verify that the UNBLOCK CHV function conforms to the above requirements. 

NOTE 1: CRl is tested in subclauses 6.5.9, 6.5.10, 6.5.11 and 6.5.12. 

NOTE 2: This function is only tested for CHVl. It is assumed that if the function operates correctly for CHVl, it 
will also operate correctly for CHV2 or other CHV. 

6.5.13.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 1 

a) The ME simulator resets the SIM. 

b) The ME simulator sends SELECT commands to the SIM to select EFkc under DFqsm- 

c) The ME simulator sends a VERIFY CHV command to the SIM. 

d) The ME simulator sends an UNBLOCK CHV command with incorrect UNBLOCK CHVl to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2 ='04' - unsuccessful UNBLOCK CHV 
verification, at least one attempt left. 

e) The ME simulator sends a STATUS command to the SIM. 
The following shall be true of the response data [CR6,8]: 

Bit 8 of byte 14 shall be indicating that CHVl is enabled. 

Bits 1 through 4 of byte 19 shall indicate three VERIFY CHVl attempts remaining. 

Bits 1 through 4 of byte 20 shall indicate nine UNBLOCK CHVl attempts remaining. 

f) The ME simulator sends a DISABLE CHV command to the SIM. 

g) The ME simulator sends an UNBLOCK CHV command with incorrect UNBLOCK CHVl to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2 ='04' - unsuccessful UNBLOCK CHV 
verification, at least one attempt left. 

h) The ME simulator sends a STATUS command to the SIM. 

The following shall be true of the response data [CR6,8]: 

Bit 8 of byte 14 shall be 1 indicating that CHVl is still disabled. 

Bits 1 through 4 of byte 19 shall indicate three VERIFY CHVl attempts remaining. 

Bits 1 through 4 of byte 20 shall indicate eight UNBLOCK CHVl attempts remaining. 

i) The ME simulator sends an UNBLOCK CHV command to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR2]. 

j) The ME simulator sends a STATUS command to the SIM. 

The following shall be true of the response data [CR4,5]: 

Bit 8 of byte 14 shall be indicating that CHVl is enabled 

Bits 1 through 4 of byte 19 shall indicate three VERIFY CHVl attempts remaining. 

Bits 1 through 4 of byte 20 shall indicate ten UNBLOCK CHVl attempts remaining. 
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k) The ME simulator sends a VERIFY CHV command with incorrect CHVl to the SIM. 

The status condition returned by the SIM shall be SW1 = '98', SW2= '04' - unsuccessful CHV verification, at least 
one attempt left. 

1) The ME simulator resets the SIM. 

m) The ME simulator sends an UNBLOCK CHV command to the SIM. 

n) The ME simulator sends a STATUS command to the SIM. 

The following shall be true of the response data [CR4]: 

Bits 1 through 4 of byte 19 shall indicate three VERIFY CHVl attempts remaining. 

o) The ME simulator sends SELECT commands to the SIM to select EFkc under DFgsm- 

p) The ME simulator sends a READ BINARY command using a length of 2 bytes to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR5]. 

Test procedure 2 - *** Destructive test *** 

a) The ME simulator resets the SIM. 

b) The ME simulator sends nine UNBLOCK CHV command with incorrect UNBLOCK CHVl to the SIM. 

The status condition returned by the SIM each time shall be SW1 = '98', SW2= '04' - unsuccessful UNBLOCK 
CHV verification, at least one attempt left. 

c) The ME simulator resets the SIM. 

d) The ME simulator sends an UNBLOCK CHV command with incorrect UNBLOCK CHVl to the SIM. 

The status condition returned by the SIM shall be SW1 = '98', SW2= '40' - unsuccessful UNBLOCK CHV 
verification, no attempt left. 

e) The ME simulator sends an UNBLOCK CHV command to the SIM. 

The status condition returned by the SIM shall be SWl = '98', SW2= '40' - UNBLOCK CHV blocked. 

6.5.14 INVALIDATE function 

6.5.14.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [1] to support all functions described therein. 

6.5.14.2 Conformance requirement 

CRl: This function shall invalidate the current EF. 

CR2: After an INVALIDATE function the respective flag in the file status shall be changed accordingly. 

CR3: The function shall only be performed if the INVALIDATE access condition for the current EF is satisfied. 

CR4: An invalidated file shall no longer be available within the appUcation for any function except for the 
SELECT and REHABILITATE functions. 

Reference: GSM 11.11 [1], subclause 8.14. 

Test Group Reference (TGR): TGR_SIM_FN. 

Test Procedure Reference (TPR): TPR_SIM_FN_INVAL. 
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6.5.14.3 Test purpose 

To verify that the INVALIDATE function conforms to the above requirements. 

6.5.14.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 

2) EFloci on the SIM is not invalidated. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends SELECT commands to the SIM to select EFloci under DFqsm- 

c) The ME simulator sends an INVALIDATE command to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2 ='04' - access condition not fulfilled [CR3]. 

d) The ME simulator gains the security access condition(s) specified for both INVALIDATE and REHABILITATE 
on EFloci. 

e) The ME simulator sends a SELECT command to the SIM to select EFloci once more. 

f) The ME simulator sends a GET RESPONSE command to the SIM. 
The following shall be true of the response data: 

Bit 1 of byte 12 shall be 1 indicating that the file is not invalidated. 

g) The ME simulator sends an INVALIDATE command to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR3]. 
h) The ME simulator sends a SELECT command to the SIM to select EFloci again. 

The status condition returned by the SIM shall be SWl = '9F', SW2='XX' - length 'XX' of the response data [CR4]. 
i) The ME simulator sends a GET RESPONSE command to the SIM. 

The following shall be true of the response data [CR1,2]: 

Bit 1 of byte 12 shall be indicating that the file is invalidated. 

j) The ME simulator sends a VERIFY CHV command to the SIM. 

k) The ME simulator sends a UPDATE BINARY command using a length of 1 byte and data 'CI' to the SIM. 

The status condition returned by the SIM shall be SW1 = '98', SW2='10' - in contradiction with invalidation status 
[CR4]. 

1) The ME simulator sends a READ BINARY command to the SIM. 

The status condition returned by the SIM shall be SW1 = '98', SW2='10' - in contradiction with invalidation status 
[CR4]. 

m) The ME simulator sends a REHABILITATE command to the SIM. 

The status condition returned by the SIM shall be SW1 = '90', SW2= '00' - normal ending of command [CR4]. 



ETSI 



74 ETSI TS 1 01 086 V8.2.0 (2005-06) 

6.5.15 REHABILITATE function 

6.5.15.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [1] to support all functions described therein. 

6.5.15.2 Conformance requirement 

CRl: This function shall rehabilitate an invalidated current EF. 

CR2: After a REHABILITATE function the respective flag in the file status byte shall be changed accordingly. 

CR3: The function shall only be performed if the REHABILITATE access condition for the current EF is 
satisfied. 

Reference: GSM 11.11 [1], subclause 8.15. 

Test Group Reference (TGR): TGR_SIM_FN. 

Test Procedure Reference (TPR): TPR_SIM_FN_REHAB. 

6.5.15.3 Test purpose 

To verify that the REHABILITATE function conforms to the above requirements. 

6.5.15.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 

2) EFloci on the SIM is invalidated. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends SELECT commands to the SIM to select EFloci under DFqsm- 

c) The ME simulator sends a REHABILITATE command to the SIM. 

The status condition returned by the SIM shall be SWl = '98 ', SW2= '04 ' - access condition not fulfilled [CR3]. 

d) The ME simulator gains the security access condition(s) specified for both INVALIDATE and REHABILITATE 
on EFloci. 

e) The ME simulator sends a SELECT command to the SIM to select EFloci once more. 

f) The ME simulator sends a GET RESPONSE command to the SIM. 
The following shall be true of the response data: 

Bit 1 of byte 12 shall be indicating that the file is invalidated. 

g) The ME simulator sends a REHABILITATE command to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CR1,3]. 
h) The ME simulator sends a SELECT command to the SIM to select EFloci again, 
i) The ME simulator sends a GET RESPONSE command to the SIM. 

The following shall be true of the response data [CRl, 2]: 

Bit 1 of byte 12 shall be 1 indicating that the file is no longer invalidated. 
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j) The ME simulator sends a VERIFY CHV command to the SIM. 

k) The ME simulator sends a UPDATE BINARY command using a length of 1 byte and data 'Dl' to the SIM. 
The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CRl]. 

6.5.1 6 RUN GSM ALGORITHM function 

6.5.16.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [1] to support all functions described therein. 

6.5.16.2 Conformance requirement 

CRl; This function shall cause the SIM to run the A3 and A8 algorithms using a 16 byte random number and the 
subscriber authentication key Ki stored in the SIM. 

CR2: The function shall return the signed response SRES and cipher key Kc. 

CR3: The function shall not be executable unless DF^sm has been selected as the current directory. 

CR4: The function shall not be executable unless a successful CHV 1 verification procedure has been performed. 
Reference: GSM 11.11 [1], subclause 8.16. 
Test Group Reference (TGR): TGR_SIM_FN. 
Test Procedure Reference (TPR): TPR_SIM_FN_RUNGSM. 

6.5.16.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

6.5.16.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends a SELECT command to the SIM to select DFqsm- 

c) The ME simulator sends a RUN GSM ALGORITHM command to the SIM with random number: 

- '00 01 02 03 04 05 06 07 08 09 OA OB OC OD OE OF'. 

The status condition returned by the SIM shall be SWl = '98', SW2= '04' - access condition not fulfilled [CR4]. 

d) The ME simulator resets the SIM. 

e) The ME simulator sends a VERIFY CHV command to the SIM. 

f) The ME simulator sends a RUN GSM ALGORITHM command to the SIM with random number: 

- '00 01 02 03 04 05 06 07 08 09 OA OB OC OD OE OF'. 

The status condition returned by the SIM shall be SWl = '94, SW2= '08' - file inconsistent with command [CR3]. 

g) The ME simulator sends a SELECT command to the SIM to select DFgsm- 

h) The ME simulator sends a RUN GSM ALGORITHM command to the SIM with random number: 
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- '00 01 02 03 04 05 06 07 08 09 OA OB OC OD OE OF'. 

The status condition returned by the SIM shall be SWl = '9F', SW2= 'OC - length 'XX' of the response data 
[CR3,4]. 

i) The ME simulator sends a GET RESPONSE command to the SIM. 

The data returned shall be correct for the given A3 and A8 algorithms and Ki stored in the SIM [CR1,2]. 

6.5.17 SLEEP function 

6.5.17.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [1] to support all functions described therein. 
This function is an obsolete GSM function which was issued by Phase 1 MEs. 

6.5.17.2 Conformance requirement 

CRl: The function shall always return a good status. 
Reference: GSM 11.11 [1], subclause 8.17. 
Test Group Reference (TGR): TGR_S1M_FN. 
Test Procedure Reference (TPR): TPR_S1M_FN_SLEEP. 

6.5.17.3 Test purpose 

To verify that the SLEEP function conforms to the above requirement. 

6.5.17.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends a SLEEP command to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2= '00' - normal ending of command [CRl]. 

6.6 Description of the commands 

The tests in this subclause ensure that the lUT conforms to the specification for the mapping of functions onto 
Application Protocol Data Units (APDUs) which are used by the transmission protocol. 

6.6.1 IVIapping principles 

6.6.1 .1 Definition and applicability 

The transmission protocol requires that the command and response Application Protocol Data Units (APDUs) are 
mapped using certain principles, in order to ensure correct operation in the GSM environment. 

6.6.1.2 Conformance requirement 

- CRl: The command APDU shall have format (CLA, INS, PI, P2, P3 {, data}). 
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- CR2: The response APDU shall have format ({data, } SWl, SW2). 

- CR3: The class 'AO' shall be accepted by the SIM. 
Reference: GSM 11.11 [1], subclause 9.1. 

Test Group Reference (TGR): TGR_SIM_CMD_MAP. 
Test Procedure Reference (TPR): TPR_S1M_CMD_MAP. 

6.6.1.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

6.6.1.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator gains the security access condition(s) specified by the administrative authority for both 
INVALIDATE and REHABILITATE on EFloci. 

c) The ME simulator sends SELECT commands to the SIM to select DFqsm- 

d) The ME simulator sends a VERIFY CHV command to the SIM. 

e) The ME simulator sends a SELECT command to the SIM to select EFloci- 

- [Bytes sent: CLA='AO', INS='A4', PI ='00', P2='00', P3='02', data='6F 7E']. 

- [Bytes received: SWl, SW2i]. 

The SIM shall have sent SWl = '9F' and SW2='lgth ' [CRl]. 

f) The ME simulator sends a GET RESPONSE command to the SIM, requesting all of the available response data, 
as indicated by SW2i. 

- [Bytes sent: CLA='AO', INS='CO', P1='00', P2='00', P3=SW2i]. 

- [Bytes received: data, SWl, S W2] . 

The SIM shall have sent 'Igth' bytes followed by SWl = '90' and SW2='00' [CR2]. 

g) The ME simulator sends a READ BINARY command to the SIM to read both bytes. 

- [Bytes sent: CLA='AO', INS='BO', PI ='00', P2='00', P3='02']. 

- [Bytes received: data, SWl, S W2] . 

The SIM shall have sent 2 bytes followed by SW1 = '90' and SW2='00'. 
h) The ME simulator sends an INVALIDATE command to the SIM. 

- [Bytes sent: CLA='AO', INS='04', PI ='00', P2='00', P3='00']. 

- [Bytes received: SWl, SW2]. 

The SIM shall have sent SWl = '90' and SW2= '00'. 
i) The ME simulator sends a REHABILITATE command to the SIM. 
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6.6.2 Coding of the commands 



The test procedures defined in subclause 6.5 of the present document, "Descriptions of the functions", intrinsically test 
most the coding of the associated commands. Therefore, test purposes exist in this subclause only to cover areas of 
testing not already covered by subclause 6.5. 

6.6.2.1 SELECT command 

The test procedure defined in subclause 6.5.1 of the present document, "SELECT function" intrinsically tests the coding 
of this command and so is not replicated here. 

6.6.2.2 STATUS command 

The test procedure defined in subclause 6.5.2 of the present document, "STATUS function" intrinsically tests the coding 
of this command and so is not replicated here. 

6.6.2.3 READ BINARY command 

The test procedure defined in subclause 6.5.3 of the present document, "READ BINARY function" intrinsically tests 
the coding of this command and so is not replicated here. 

6.6.2.4 UPDATE BINARY command 

The test procedure defined in subclause 6.5.4 of the present document, "UPDATE BINARY function" intrinsically tests 
the coding of this command and so is not replicated here. 

6.6.2.5 READ RECORD command 

The test procedure defined in subclause 6.5.5 of the present document, "READ RECORD function" intrinsically tests 
the coding of this command and so is not replicated here. 

6.6.2.6 UPDATE RECORD command 

The test procedure defined in subclause 6.5.6 of the present document, "UPDATE RECORD function" intrinsically tests 
the coding of this command and so is not replicated here. 

6.6.2.7 SEEK command 

The test procedure defined in subclause 6.5.7 of the present document, "SEEK function" intrinsically tests the coding of 
this command and so is not replicated here. 

6.6.2.8 INCREASE command 

The test procedure defined in subclause 6.5.8 of the present document, "VERIFY CHV function" intrinsically tests the 
coding of this command and so is not replicated here. 

6.6.2.9 VERIFY CHV command 

The test procedure defined in subclause 6.5.9 of the present document, "VERIFY CHV function" intrinsically tests the 
coding of this command and so is not replicated here. 

6.6.2.1 CHANGE CHV command 

The test procedure defined in subclause 6.5.10 of the present document, "CHANGE CHV function" intrinsically tests 
the coding of this command and so is not replicated here. 



£75/ 



79 ETSI TS 1 01 086 V8.2.0 (2005-06) 



6.6.2.11 DISABLE CHV command 



The test procedure defined in subclause 6.5. 1 1 of the present document, "DISABLE CHV function" intrinsically tests 
the coding of this command and so is not replicated here. 

6.6.2.1 2 ENABLE CHV command 

The test procedure defined in subclause 6.5.12 of the present document, "ENABLE CHV function" intrinsically tests 
the coding of this command and so is not replicated here. 

6.6.2.1 3 UNBLOCK CHV command 

The test procedure defined in subclause 6.5.13 of the present document, "UNBLOCK CHV function" intrinsically tests 
the coding of this command and so is not replicated here. 

6.6.2.14 INVALIDATE command 

The test procedure defined in subclause 6.5.14 of the present document, "INVALIDATE function" intrinsically tests the 
coding of this command and so is not replicated here. 

6.6.2.15 REHABILITATE command 

The test procedure defined in subclause 6.5.15 of the present document, "REHABILITATE function" intrinsically tests 
the coding of this command and so is not replicated here. 

6.6.2.1 6 RUN GSM ALGORITHM command 

The test procedure defined in subclause 6.5.16 of the present document, "RUN GSM ALGORITHM function" 
intrinsically tests the coding of this command and so is not replicated here. 

6.6.2.17 SLEEP command 

The test procedure defined in subclause 6.5.17 of the present document, "SLEEP function" intrinsically tests the coding 
of this command and so is not replicated here. 

6.6.2.18 GET RESPONSE command 

6.6.2.18.1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [ 1 ] to support all ftinctions described therein. 

6.6.2.18.2 Conformance requirement 

CRl: The GET RESPONSE command shall provide response data after the execution of commands RUN GSM 
ALGORITHM, SEEK (type 2), SELECT, and INCREASE. 

CR2: It is required that the GET RESPONSE command is executed immediately after the command it is related 
to (no other command shall come between the command/response pair and the command GET RESPONSE). If 
this sequence is not respected, the SIM shall send the Status Information "technical problem with no diagnostic 
given" as a reaction to the GET RESPONSE. 

- CR3: Since the MF is implicitly selected after the activation of the SIM, GET RESPONSE shall be allowed as 
the first command after activation. 

Reference: GSM 11.11 [1], subclause 9.2.18. 

Test Group Reference (TGR): TGR_SIM_CMD. 

Test Procedure Reference (TPR): TPR_SIM_CMD_GET. 
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6.6.2.18.3 Test purpose 

To verify that the coding of the GET RESPONSE command conforms to the above requirements. 
NOTE: CRl is tested in subclauses 6.5.1, 6.5.7, 6.5.8, 6.5.16 and 6.5.17. 

6.6.2.18.4 Method of test 
Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends a GET RESPONSE command to the SIM. 

- [Bytes sent: CLA='AO', INS='CO', P1='00', P2='00', P3='08']. 

- [Bytes received: P3 bytes of data, SWl, SW2]. 

Bytes 5 and 6 of the response data shall indicate that MF is the currently selected file [CR3]. 

c) The ME simulator sends a STATUS command to the SIM with correct P3. 

d) The ME simulator sends a GET RESPONSE command to the SIM. 

- [Bytes sent: CLA='AO', INS='CO', P1='00', P2='00', P3='05']. 

- [Bytes received: SWl, SW2]. 

The status condition returned by the SIM shall be SW1 = '6F', SW2='XX' - technical problem with no diagnostic 
given [CR2]. 

6.6.3 Definitions and coding 

6.6.3.1 Definition and applicability 

Certain definitions and coding are used in the response parameters/data of the commands. 

6.6.3.2 Conformance requirement 

CRl: The file structure indicator byte shall be one of the following values within the specified range: '00', '01' or 
'03'. 

CR2: The file type indicator byte shall be one of the following values within the specified range: '00', '01', '02' or 
'04'. 

Reference: GSM 11.11 [1], subclause 9.3. 

Test Group Reference (TGR): TGR_SIM_CMD_DEF. 

Test Procedure Reference (TPR): TPR_SIM_CMD_DEF. 

6.6.3.3 Test purpose 

To verify that the response parameters/data conform to the above requirements for all file IDs on the SIM. 
NOTE: CR2 is covered in subclause 6.3.1.1. 
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6.6.3.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 

a) Tiie ME simulator resets the SIM. 

b) For every possible selectable file ID in the file structure, the ME simulator sends SELECT commands to select 
the file ID. When a file is selected successfully, the ME simulator sends a GET RESPONSE command to the 
SIM. 

For all EFs found, the following shall be true of the response data: 

Byte 15 shall be '00' if the EF is Transparent. 

The file structure indicator byte shall be coded as follows, according to the specification in clause 10 of 
GSM 11.11 [1] [CRl]: 

'00' = Transparent 

'01 ' = Linear Fixed 

'03 ' = Cyclic 

6.6.4 Status conditions returned by tine SIM 
6.6.4.1 Coding of the status words 

6.6.4.1 .1 Definition and applicability 

The status words SWl and SW2 provide the method with which the SIM can respond to the ME after executing a 
command. 

6.6.4.1.2 Conformance requirement 

CRl: The SIM shall respond with the correct SWl and SW2 status words for commands which are correctly 
executed. 

CR2: The SIM shall respond with the correct SWl and SW2 status words for commands which produce memory 
management errors. 

CR3: The SIM shall respond with the correct SWl and SW2 status words for commands which produce 
referencing management errors. 

CR4: The SIM shall respond with the correct SWl and SW2 status words for commands which produce security 
management errors. 

CR5: The SIM shall respond with the correct SWl and SW2 status words for commands which produce 
application independent errors. 

Reference: GSM 11.11 [1], subclause 9.4. 

Test Group Reference (TGR): TGR_SIM_CMD_SC_SW. 

Test Procedure Reference (TPR): TPR_SIM_CMD_SC_SW. 

6.6.4.1.3 Test purpose 

To verify that the SIM conforms to the above requirements when issuing SWl and SW2 status words. 
NOTE 1 : CR2 cannot be tested as there is no mechanism to force the SIM to produce memory errors. 
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NOTE 2: CR4 is already tested in subclause 6.5.8. 

6.6.4.1.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 

2) EFadn on the SIM is not invalidated. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends a VERIFY CHV command to the SIM. 

c) The ME simulator sends SELECT commands to the SIM to select DFgsm- 

The status condition returned by the SIM shall be SWl = '9F', SW2= 'XX' - length 'XX' of the response data [CRl]. 

d) The ME simulator sends a GET RESPONSE command to the SIM. 

The status condition returned by the SIM shall be SWl = '90', SW2='00' - normal ending of command [CRl]. 

e) The ME simulator sends a READ BINARY command using a length of 1 byte to the SIM. 
The status condition returned by the SIM shall be SWl = '94', SW2='00' - no EF selected [CR3]. 

f) The ME simulator sends SELECT commands to the SIM to select EFadn- 

g) The ME simulator sends an UPDATE RECORD command using PREVIOUS mode to the SIM. The data used is 
'El' for all bytes. 

h) The ME simulator sends an UPDATE RECORD command using NEXT mode to the SIM. The data used is 'E2' 
for all bytes. 

The status condition returned by the SIM shall be SWl = '94', SW2='02' - out of range (invalid address) [CR3]. 

i) The ME simulator sends a READ BINARY command using a length of 1 byte to the SIM. 

The status condition returned by the SIM shall be SWl ='94', SW2='08' -file type inconsistent with the command 
[CR3]. 

j) The ME simulator sends a VERIFY CHV command with incorrect CHVl to the SIM. 

The status condition returned by the SIM shall be SWl = '98', SW2= '04' - unsuccessful CHV verification, at least 
one attempt left. 

k) The ME simulator sends an ENABLE CHV command to the SIM. 

The status condition returned by the SIM shall be SWl = '98', SW2='08' - in contradiction with CHV status 
[CR3]. 

1) The ME simulator sends VERIFY CHV command with incorrect CHVl to the SIM. 

m) The ME simulator sends VERIFY CHV command with incorrect CHVl to the SIM. 

The status condition returned by the SIM shall be SWl = '98', SW2='40' - unsuccessful CHV verification, no 
attempt left. 

n) The ME simulator sends an UPDATE RECORD command using ABSOLUTE mode with record 1 to the SIM. 
Parameter P3 is set to 1 and the data used is 'E3'. 

The status condition returned by the SIM shall be SWl = '67', SW2 = 'XX' or SWl = '98 ', SW2 ='04' - incorrect 
parameter P3 [CR3]. 
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o) The ME simulator sends an UPDATE RECORD command using mode '44' to the SIM. The data used is 'E4' for 
all bytes. 

The status condition returned by the SIM shall be SW1 = '6B', SW2='00' or SW1 = '98', SW2='04' - incorrect 
parameter PI or P2 [CR3]. 

p) The ME simulator sends the following APDU to the SIM. 

[Bytes sent: CLA='AO', INS='1E', P1='00', P2='00', P3='00'] 

The status condition returned by the SIM shall be SW1 = '6D', SW2='00' - unknown instruction code given in the 
command [CR5]. 

s) The ME simulator sends a GET RESPONSE command to the SIM. 

The status condition returned by the SIM shall be SW1 = '6F', SW2='XX' - technical problem with no diagnostic 
given [CR5]. 

6.6.4.2 Commands versus possible status responses 

6.6.4.2.1 Definition and applicability 

Limiting the status conditions for each command to a defined set allows the ME to efficiently manage the handling of 
the status condition. 

6.6.4.2.2 Conformance requirement 

CRl: Table 10 in GSM 11.11 [1], subclause 9.4.6 shows for each command the possible status conditions 
returned (marked by an asterisk *). The SIM shall not generate status conditions other than those allowed for 
each command. 

Reference: GSM 11.11 [1], subclause 9.4.6. 

Test Group Reference (TGR): TGR_SIM_CMD_SC_CSR. 

Test Procedure Reference (TPR): TPR_SIM_CMD_SC_CSR. 

6.6.4.2.3 Test purpose 

To verify for each command that the SIM will only generate the allowed status conditions. 

NOTE: CRl cannot be tested as it is not possible to force the SIM to generate all of the allowed status conditions 
for each command and there is no way of forcing the SIM to generate disallowed status conditions for 
each command. 

6.6.4.2.4 Method of test 
Initial conditions 

N/A 

Test procedure 

N/A 

6.6.4.2.5 Test requirement 

N/A 

6.7 Contents of the elementary files 

The subclause provides tests to ensure that the lUT contains all of the EFs need for a GSM session. 
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6.7.1 Definition and applicability 



The Elementary Files described in clause lOofGSM 11.11 [1] are required on the SIM card in order for a GSM session 
to be carried out. 

The contents of these files are not tested as they are card/personalization specific. 

6.7.2 Conformance requirement 

The following conformance requirements refer to the tables for each EF in clause 1 of GSM 11.11 [ 1 ] . 

CRl: Each existing EF shall be selectable under the respective DF using the identifier given in the table for that 
EF. 

CR2: All mandatory EFs shall exist on the SIM card. 

CR3: The identifier of the EF shall be that given in the table for that EF.CR4 The type and structure of the EF 
shall be that given in the table for that EF. 

CR5: The file size shall be at least that given in the table for that EF. 

CR6: The access conditions shall be those given in the table for that EF. 
Reference: GSM 11.11 [1], clause 10. 
Test Group Reference (TGR): TGR_SIM_CEF. 
Test Procedure Reference (TPR): TPR_SIM_CEF. 

6.7.3 Test purpose 

To verify that the SIM conforms to the above requirements. 

NOTE: The contents and coding of the data within the files are not tested, but shall conform to the respective 
contents and coding of the data given for each file in clause 10 of GSM 11.11 [1]. 

6.7.4 Method of test 

Initial conditions 

1) The SIM is connected to an ME simulator. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends SELECT commands to the SIM to select the respective DF for the first EF in clause 10 

of GSM 11.11 [1]. 

The status condition returned by the SIM shall be SWl = '9F', SW2='XX' - length 'XX' of the response data [CRl]. 

c) The ME simulator sends a SELECT command to the SIM to select the first EF in clause 10 of GSM 11.11 [1]. 

The status condition returned by the SIM shall be SW1 = '9F', SW2= 'XX' - length 'XX' of the response data 
[CR1,2]. 

d) The ME simulator sends a GET RESPONSE command to the SIM. 
The following shall be true of the response data: 

Bytes 5 and 6 shall indicate the identifier of the file selected. [CR3]. 

Byte 7 shall be '04' indicating EF [CR4]. 

Byte 14 shall indicate the structure given in the table for the file in clause 10 of GSM 11.11 [1] [CR4]. 
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Bytes 3 and 4 shall be at least the minimum file size given in the table for the file in clause 10 of 
GSM 11.11 [1] if the EF is transparent [CR5]. 

Byte 15 shall be in accordance with the record length given in the table for the file in clause 10 of 
GSM 11.11 [1] if the EF is linear fixed or cyclic [CR5]. 

Bytes 3 and 4 shall be an integer multiple of the record length if the EF is linear fixed or cyclic [CR5]. 

Bytes 9, 10 and 11 shall indicate the access conditions given in the table for the file in clause 10 of 
GSM 11.11 [1] [CR6]. 

e) Steps a) to d) are repeated for the remaining mandatory EFs in clause 10 of GSM 11.11 [1]. 

f) Steps a) to d) are repeated for the existing optional EFs in clause 10 of GSM 11.11 [1]. 



6.8 Application Protocol 



The tests in this subclause ensure that the lUT conforms to the functional specification for application protocol - in 
particular the internal management of AND/FDN switching in the SIM. 

6.8.1 FDN Procedure 

6.8.1 .1 Definition and applicability 

It shall be mandatory for all cards complying with GSM 11.11 [1] to support all internal management processing 
required for the GSM application. 

6.8.1.2 Conformance requirement 

CRl: If FDN is enabled, the SIM shall invalidate both EFimsi and EFloci once during each GSM session at least 
before the next command following selection of either EF. 

Reference: GSM 11.11 [1], subclause 10.2.7 and 11.2.1. 

Test Group Reference (TGR): TGR_SIM_APP. 

Test Procedure Reference (TPR): TPR_SIM_APP_FDN. 

6.8.1.3 Test purpose 

To verify that the FDN feature conforms to the above requirements. 

6.8.1.4 Method of test 

Initial conditions 

1) FDN feature is allocated and activated. 

2) ADN feature is allocated and activated. 

3) EFadn is invalidated. 
Test procedure 

a) The ME simulator resets the SIM. 

b) The ME simulator sends a VERIFY CHVl to the SIM. 

c) The ME simulator sends SELECT commands to the SIM to select EFimsi under DFqsm- 

d) The ME simulator sends a GET RESPONSE command to the SIM. 

Bit 1 of byte 12 of the data returned shall be indicating that EFj^si is invalidated [CRl]. 
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e) The ME simulator sends a REHABILITATE command to the SIM. 

f) The ME simulator sends a SELECT command to the SIM to select EFloci- 

g) The ME simulator sends a GET RESPONSE command to the SIM. 

Bit 1 of byte 12 of the data returned shall be indicating that EFioci is invalidated [CRl]. 
h) The ME simulator sends a REHABILITATE command to the SIM. 

i) The ME simulator sends SELECT commands to the SIM to select EFadn under DFtelecom- 
j) The ME simulator sends a VERIFY CHV2 to the SIM. 
k) The ME simulator sends a REHABILITATE command to the SIM. 
1) The ME simulator sends a SELECT command to the SIM to select EFsst. 
m) The ME simulator gains the access condition for UPDATE policy. 

n) The ME simulator sends an UPDATE BINARY command to the SIM to deactivate the ADN service, 
o) The ME simulator resets the SIM. 
p) The ME simulator sends a VERIFY CHVl to the SIM. 

q) The ME simulator sends SELECT commands to the SIM to select EFloci under DFgsm- 
r) The ME simulator sends a GET RESPONSE command to the SIM. 

Bit 1 of byte 12 of the data returned shall be indicating that EFioci '■* invalidated [CRl]. 
s) The ME simulator sends a REHABILITATE command to the SIM. 
t) The ME simulator sends a SELECT command to the SIM to select EFimsi- 
u) The ME simulator sends a GET RESPONSE command to the SIM. 

Bit 1 of byte 12 of the data returned shall be indicating that EFj^si is invalidated [CRl]. 
v) The ME simulator sends a REHABILITATE command to the SIM. 
w) The ME simulator sends a SELECT command to the SIM to select EFsst. 
x) The ME simulator gains the access condition for UPDATE policy. 

y) The ME simulator sends an UPDATE BINARY command to the SIM to deallocate the ADN service, 
z) The ME simulator resets the SIM. 

aa) The ME simulator sends a VERIFY CHVl to the SIM. 

ab) The ME simulator sends SELECT commands to the SIM to select EFloci under DFqsm- 

ac) The ME simulator sends a GET RESPONSE command to the SIM. 

Bit 1 of byte 12 of the data returned shall be indicating that EFioci is invalidated [CRl]. 

ad) The ME simulator sends a REHABILITATE command to the SIM. 

ae) The ME simulator sends a SELECT command to the SIM to select EFimsi- 

af) The ME simulator sends a GET RESPONSE command to the SIM. 

Bit 1 of byte 12 of the data returned shall be indicating that EFimsi is invalidated [CRl]. 

ag) The ME simulator sends a REHABILITATE command to the SIM. 

ah) The ME simulator sends a SELECT command to the SIM to select EFsst. 
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ai) The ME simulator sends an UPDATE BINARY command to the SIM to allocate and activate the ADN service. 

aj) The ME simulator resets the SIM. 

ak) The ME simulator sends a SELECT command to the SIM to select EFloci- 

al) The ME simulator sends a GET RESPONSE command to the SIM. 

Bit 1 of byte 12 of the data returned shall be 1 indicating that EFioci is not invalidated [CRl]. 
am) The ME simulator sends a SELECT command to the SIM to select EFimsi- 
an) The ME simulator sends a GET RESPONSE command to the SIM. 

Bit 1 of byte 12 of the data returned shall be 1 indicating that EFj^si is not invalidated [CRl]. 
ao) The ME simulator sends a SELECT command to the SIM to select EFsst. 
ap) The ME simulator gains the access condition for UPDATE policy. 

aq) The ME simulator sends an UPDATE BINARY command to the SIM to deactivate the FDN service, 
ar) The ME simulator sends SELECT commands to the SIM to select EFadn under DFtelecom- 
as) The ME simulator sends a VERIFY CHV2 to the SIM. 
at) The ME simulator sends a INVALIDATE command to the SIM. 
au) The ME simulator resets the SIM. 

av) The ME simulator sends a SELECT command to the SIM to select EFloci- 
aw) The ME simulator sends a GET RESPONSE command to the SIM. 

Bit 1 of byte 12 of the data returned shall be 1 indicating that EFiqqi is not invalidated [CRl]. 
ax) The ME simulator sends a SELECT command to the SIM to select EFimsi- 
ay) The ME simulator sends a GET RESPONSE command to the SIM. 

Bit 1 of byte 12 of the data returned shall be 1 indicating that EFimsi is not invalidated [CRl]. 
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